Struct Policy 

pub struct Policy { /* private fields */ }

Policy engine for execution control

Implementations

impl Policy

pub fn new() -> Self

pub fn new_whitelist() -> Self

Create a new policy with whitelist mode (only allow explicitly listed commands)

pub fn new_blacklist() -> Self

Create a new policy with blacklist mode (deny explicitly listed commands)

pub fn new_with_defaults() -> Self

Create policy with default dangerous command blacklist

pub fn empty() -> Self

pub fn set_whitelist_mode(&mut self, enabled: bool)

Enable whitelist mode (only allow explicitly allowed commands)

pub fn set_default_decision(&mut self, decision: Decision)

Set the default decision for commands without matching rules

pub fn add_prefix_rule( &mut self, prefix: &[String], decision: Decision, justification: Option<String>, ) -> Result<(), String>

Add a prefix rule

pub fn add_prefix_rule_ext( &mut self, prefix: &[String], decision: Decision, justification: Option<String>, rule_type: RuleType, allowed_directories: Option<Vec<String>>, _restrict_to_directories: bool, ) -> Result<(), String>

Add a prefix rule with advanced options

pub fn check(&self, command: &[String]) -> Option<RuleMatch>

Check if a command is allowed (with working directory context)

pub fn check_with_cwd( &self, command: &[String], working_directory: Option<&str>, ) -> Option<RuleMatch>

Check if a command is allowed with working directory context This enables detection of directory bypass attempts

pub fn check_network(&self, host: &str, port: Option<u16>) -> Decision

Check network access

pub fn add_network_rule(&mut self, rule: NetworkRule)

Add network rule

pub fn add_path_rule(&mut self, rule: PathRule)

Add a path rule for file/directory access control

pub fn add_path_rule_simple( &mut self, path_pattern: String, is_directory: bool, decision: Decision, justification: Option<String>, )

Add a path rule with common options

pub fn check_path(&self, path: &str) -> Decision

Check path access against path rules

pub fn get_allowed_prefixes(&self) -> Vec<Vec<String>>

Get allowed prefixes

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Policy

fn default() -> Self

Returns the “default value” for a type.