pypledge 0.1

Binding for the OpenBSD pledge(2) system call

Prototype

def pledge(promises: Iterable[str]) -> None: pass

Throws OSError if the platform does not support pledge(2), and PermissionError if the pledge fails.

Example

The following will restrict the current process to only the stdio and tty promises, and then attempt to violate that restriction:

import pypledge
pypledge.pledge(['stdio', 'tty'])
f = open('foo.txt')

On OpenBSD 5.9, this will terminate with SIGABRT because the rpath promise was required.

On other platforms, OSError will be thrown.

Todo

pledge(2) currently always returns EINVAL if given a paths whitelist. Support for this feature will be added to pypledge once it becomes available in a stable OpenBSD release.