airsl 0.1.3

Embeddable Lua 5.4 runtime with a capability-gated sandbox and a host standard library
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34

//! The three independent axes of what a script is allowed to do.
//!
//! Grouped here because they are only meaningful together: a language surface without ceilings
//! stops a script reaching the filesystem but not hanging the host, and ceilings without a surface
//! bound what a script spends but not what it touches. [`Policy`] composes all three, and the
//! presets on it are what most callers should reach for.
//!
//! Responsibilities:
//!
//! - [`policy`] — [`Policy`] and the `trusted`/`confined`/`pure` presets.
//! - [`language_surface`] — which of Lua's own libraries a script sees.
//! - [`grant_set`] — what the host modules it reaches may touch.
//! - [`grants`] — the parameterised authorities a grant set is built from.
//! - [`resource_limits`] — how much memory and execution it may consume.
//!
//! Non-responsibilities: what a caller does about a script that failed. That is
//! [`crate::FailurePolicy`], which is the caller's reaction rather than the script's permissions.

pub mod grant_set;
pub mod grants;
pub mod language_surface;
pub mod policy;
pub mod resource_limits;

#[doc(inline)]
pub use grant_set::GrantSet;
#[doc(inline)]
pub use grants::{EnvGrant, FsGrant, ProcGrant};
#[doc(inline)]
pub use language_surface::LanguageSurface;
#[doc(inline)]
pub use policy::Policy;
#[doc(inline)]
pub use resource_limits::{InstructionLimit, MemoryLimit, ResourceLimits};