Struct ProcessConfig 

pub struct ProcessConfig {
    pub allow: Vec<String>,
}

Process-spawn configuration for a principal.

Empty allow means the principal cannot spawn external processes.

Fields

allow: Vec<String>

Executables permitted for process spawn.

Entries may be absolute paths or short names drawn from a sandbox profile allowlist; the final grammar is pinned by Layer 5. This layer validates only that entries are non-empty strings.

Implementations

impl ProcessConfig

pub fn validate(&self) -> ProfileResult<()>

Validate process-allow entries.

Errors

Returns ProfileError::Invalid if any entry is an empty string. Richer grammar checking is deferred to Layer 5.

Trait Implementations

impl Clone for ProcessConfig

fn clone(&self) -> ProcessConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProcessConfig

fn default() -> ProcessConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ProcessConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ProcessConfig

impl PartialEq for ProcessConfig

fn eq(&self, other: &ProcessConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProcessConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ProcessConfig