forbid_everything.jsonnet

// Rules to enforce the use of the TCB and forbid the use of the standard
// library or any non-vetted external libraries.
//
// related work:
//  - ppx_base_lint
//
// TODO:
//  - forbid_fs (long)
//  - Cap.xxx_caps_UNSAFE()
//  - many more

local forbid_exit = import 'forbid_exit.jsonnet';
local forbid_network = import 'forbid_network.jsonnet';
local forbid_exec = import 'forbid_exec.jsonnet';
local forbid_chdir = import 'forbid_chdir.jsonnet';
local forbid_tmp = import "forbid_tmp.jsonnet";
local forbid_console = import 'forbid_console.jsonnet';
local forbid_process = import 'forbid_process.jsonnet';
local forbid_misc = import 'forbid_misc.jsonnet';

{ rules:
    forbid_exit.rules +
    forbid_network.rules +
    forbid_exec.rules +
    forbid_chdir.rules +
    forbid_tmp.rules +
    forbid_console.rules +
    forbid_process.rules +
    forbid_misc.rules
}