//! Process sandboxing and resource limits for modules
//!//! On Linux, module spawn enacts a Landlock domain (`landlock`) before exec.
//! Resource limits are applied with `prlimit` after the child starts.
pubmodfilesystem;pubmodlandlock;pubmodprocess;pubusefilesystem::FileSystemSandbox;pubuseprocess::{ProcessSandbox, ResourceLimits, SandboxConfig};