pub fn check_execute_roots(
host_paths: &[HostPath],
roots: &[ExecuteRoot],
mechanism: HostPathMechanism,
) -> Result<Vec<PathBuf>, HostPathRefusal>Expand description
Checks the read-write entries against what the session may run, under mechanism.
On both Landlock mechanisms a read-write entry that is or lies under an execute root is
refused. On landlock a read-write entry that contains one is refused too: nothing keeps
the capsule from rewriting a binary it may run in place. On bind such an entry is allowed,
and the execute roots inside it are returned, each to be bound read-only on top of it (a
required bind). Below both, nothing is scoped and nothing is checked.