Hello,
I would like to announce a new package restricted.
This library lets you limit which system operations and which parts of the filesystem your program can access. Call it as early as possible in your program so that the rest of the code runs with reduced privileges. Currently, actual enforced restrictions are implemented for these operating systems:
- OpenBSD
Even on other operating systems, you can still use restricted to document which privileges your program needs. Users can then test that your program respects these promises with tools such as pledge on Linux. Enjoy 
- opam: opam - restricted
- homepage: removewingman/restricted: ocaml lib to restrict system operations and filesystem view - Codeberg.org
- Documented Interface and Examples: removewingman/restricted: ocaml lib to restrict system operations and filesystem view - Codeberg.org
- License: [AGPL](GNU Affero General Public License - Wikipedia)
This is my first ocaml library so feel free to give feedback.