Struct VolumeValidator 

pub struct VolumeValidator { /* private fields */ }

Volume security validator with whitelist support

Implementations

impl VolumeValidator

pub fn new(whitelist: Vec<PathBuf>) -> Self

Create a new volume validator with whitelist

Example

use clnrm_core::backend::volume::VolumeValidator;
use std::path::PathBuf;

let validator = VolumeValidator::new(vec![
    PathBuf::from("/tmp"),
    PathBuf::from("/var/data"),
]);

pub fn validate(&self, mount: &VolumeMount) -> Result<()>

Validate a volume mount against whitelist

Errors

Returns error if host path is not under any whitelisted directory

pub fn validate_all(&self, mounts: &[VolumeMount]) -> Result<()>

Validate multiple mounts

Trait Implementations

impl Clone for VolumeValidator

fn clone(&self) -> VolumeValidator

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for VolumeValidator

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for VolumeValidator

fn default() -> Self

Create default validator with common safe directories