Struct EnforcedLimits 

pub struct EnforcedLimits {
    pub timeout: bool,
    pub memory: bool,
    pub network_isolation: bool,
    pub filesystem_write_isolation: bool,
    pub filesystem_read_isolation: bool,
    pub environment_isolation: bool,
}

Available on crate feature sandbox only.

Describes which resource limits a backend enforces.

Backends are honest about what they enforce. For example, ProcessBackend enforces timeout and environment isolation but not memory or network isolation.

Fields

timeout: bool

Whether the backend enforces execution timeout.

memory: bool

Whether the backend enforces memory limits.

network_isolation: bool

Whether the backend isolates network access.

filesystem_write_isolation: bool

Whether the backend prevents writes outside the policy’s allowed paths.

filesystem_read_isolation: bool

Whether the backend prevents reads outside the policy’s allowed paths.

Separate from write isolation because they are not equivalent and the platforms differ. The macOS Seatbelt profile denies writes, network, and fork but leaves reads open, so code can read host files outside the allowed paths even though it cannot modify them. Reporting one filesystem_isolation flag hid that.

environment_isolation: bool

Whether the backend isolates environment variables.

Trait Implementations

impl Clone for EnforcedLimits

fn clone(&self) -> EnforcedLimits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EnforcedLimits

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.