Module sandbox 

Sandbox configuration: IsolationLevel, SandboxConfig, and platform availability checks.

On FreeBSD the loader can confine each plugin to a Capsicum capability sandbox (cap_enter) or a full pdfork child process with per-process capability restrictions. On non-FreeBSD platforms the sandbox is a no-op: IsolationLevel::None is the only available option.

Usage

use audio_plugin_bsd::sandbox::{IsolationLevel, SandboxConfig};

let cfg = SandboxConfig::new()
    .with_isolation_level(IsolationLevel::None)
    .with_log_channel_capacity(64);

assert!(cfg.isolation_level().is_available());

Structs

SandboxConfig

Builder for sandbox configuration.

Enums

IsolationLevel

The degree of sandbox isolation applied to a plugin process.