dabin 0.1.0

yes. — classify a bash command as approve/defer/deny under explicit policies
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65

//! AST the classifier consumes. Minimal on purpose: everything we don't
//! need to classify safely either stays inside a `Word` (as opaque bytes) or
//! causes the lexer to return `Bail`.

#[derive(Debug, Clone, PartialEq, Eq)]
pub struct Segment {
    pub assigns: Vec<(String, String)>,
    pub argv: Vec<String>,
    pub redirects: Vec<Redirect>,
    pub follows: Separator,
}

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum Separator {
    End,
    Semi,
    And,
    Or,
    Pipe,
    PipeBoth,
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub struct Redirect {
    pub fd: Option<u32>,
    pub op: RedirOp,
    pub target: String,
}

#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum RedirOp {
    /// `>`  write, truncate
    OutTrunc,
    /// `>>` write, append
    OutAppend,
    /// `<`  read
    In,
    /// `>&` dup output fd (target is a digit or `-`)
    OutDup,
    /// `<&` dup input fd
    InDup,
    /// `&>` stdout+stderr to file (truncate)
    OutAll,
    /// `&>>` stdout+stderr to file (append)
    OutAllAppend,
    /// `>|` force truncate (ignore noclobber)
    OutClobber,
}

#[derive(Debug, Clone, PartialEq, Eq)]
pub enum Bail {
    CommandSubstitution,
    ProcessSubstitution,
    Heredoc,
    HereString,
    Arithmetic,
    Subshell,
    BraceGroup,
    /// Compound command reserved word at command position: if/while/for/case/...
    CompoundCommand,
    /// Array literal: VAR=( ... )
    ArrayLiteral,
    UnterminatedQuote,
    UnexpectedToken,
}