Struct DirScope 

pub struct DirScope { /* private fields */ }

Restricts filesystem operations to a directory subtree.

Paths are canonicalized before comparison to prevent ../ traversal attacks. If the target path cannot be canonicalized (e.g., it doesn’t exist yet), the check fails conservatively.

Example

let scope = DirScope::new("/tmp").unwrap();
// Note: check will fail if /tmp/data.txt doesn't exist (canonicalization)

Implementations

impl DirScope

pub fn new(root: impl AsRef<Path>) -> Result<Self, CapSecError>

Creates a new directory scope rooted at the given path.

The root path is canonicalized to prevent bypass via symlinks or .. components. Returns an error if the root path does not exist or cannot be resolved.

Trait Implementations

impl Scope for DirScope

fn check(&self, target: &str) -> Result<(), CapSecError>

Checks whether target is within this scope.