pub enum IsolationClass {
SubprocessOnly,
OsEnforced,
}Expand description
How much isolation a backend actually provides.
Reported so a caller can tell the two apart rather than assuming the stronger one
because the crate is named adk-sandbox.
Variants§
SubprocessOnly
A child process with a cleared environment, a timeout, and its own process group.
The OS applies no further restriction: the code can read the host filesystem and
reach the network. This is what ProcessBackend::default provides.
OsEnforced
A child process wrapped by an OS enforcer — Seatbelt, bubblewrap, or AppContainer
— under a SandboxPolicy.
Trait Implementations§
Source§impl Clone for IsolationClass
impl Clone for IsolationClass
impl Copy for IsolationClass
Source§impl Debug for IsolationClass
impl Debug for IsolationClass
impl Eq for IsolationClass
Source§impl PartialEq for IsolationClass
impl PartialEq for IsolationClass
impl StructuralPartialEq for IsolationClass
Auto Trait Implementations§
impl Freeze for IsolationClass
impl RefUnwindSafe for IsolationClass
impl Send for IsolationClass
impl Sync for IsolationClass
impl Unpin for IsolationClass
impl UnsafeUnpin for IsolationClass
impl UnwindSafe for IsolationClass
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more