Skip to main content

requires_process_bounding

capsule_runtime

Function requires_process_bounding 

Source 
pub fn requires_process_bounding(
    policy: &CapabilityPolicy,
    has_native_artifact: bool,
) -> bool
Expand description

Does this policy give the capsule any way to run a native subprocess at all?

The exact condition the Linux fail-closed launch refusal keys on: capabilities.shell.allow, capabilities.spawn.allow, or a declared artifact whose implementation is native (passed in by the caller, which is the only place the installed-artifact list is in hand).