Enum ChildNetworkPolicy 

pub enum ChildNetworkPolicy {
    LandlockOnly,
    DenyDirect,
}

How a confined child’s direct network-socket authority is enforced, beyond the caveat-driven Landlock TCP rule. A mechanism knob (it rides SandboxPolicy), never authority (Caveats): the caller states the required floor and the backend owns the enforcement (ADR 0017).

Variants

LandlockOnly

Historical behavior: rely on the caveat-driven Landlock net rule alone. An empty net scope kernel-denies TCP connect/bind on an ABI-v4 kernel, but Landlock cannot filter UDP, DNS, raw or packet sockets — a child under net: none can still create them. Backward-compatible default, so existing configs and callers are unchanged.

DenyDirect

Additionally install a seccomp socket()-family deny (AF_INET / AF_INET6 / AF_PACKET → EACCES) on the confining thread immediately before spawn, so the child and every fork/exec descendant cannot create ANY off-box socket regardless of protocol — closing the UDP/DNS/raw leg Landlock misses. AF_UNIX is deliberately still allowed (a path-named unix socket is already governed by the fs fence; abstract-namespace unix sockets are a bounded residual). Takes effect only when the net caveat is already deny-all (net: none); a granted net scope leaves it inert (the caller asked for egress). Requires the linux-landlock backend (which pulls the safe seccompiler install path); on other platforms it is inert, so a caller that requires it must fail closed via backends.require_landlock.

Trait Implementations

impl Clone for ChildNetworkPolicy

fn clone(&self) -> ChildNetworkPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ChildNetworkPolicy

impl Debug for ChildNetworkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for ChildNetworkPolicy

fn default() -> ChildNetworkPolicy

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ChildNetworkPolicy

fn deserialize<__D>( __deserializer: __D, ) -> Result<ChildNetworkPolicy, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ChildNetworkPolicy

impl PartialEq for ChildNetworkPolicy

fn eq(&self, other: &ChildNetworkPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ChildNetworkPolicy

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ChildNetworkPolicy