Struct SandboxConfig 

pub struct SandboxConfig {
    pub read_paths: HashSet<PathBuf>,
    pub write_paths: HashSet<PathBuf>,
    pub env_vars: HashSet<String>,
    pub max_memory: usize,
    pub max_time_ms: u64,
    pub allow_network: bool,
    pub allow_spawn: bool,
}

Sandbox configuration

Fields

read_paths: HashSet<PathBuf>

Allowed read paths

write_paths: HashSet<PathBuf>

Allowed write paths

env_vars: HashSet<String>

Allowed environment variables

max_memory: usize

Maximum memory (bytes)

max_time_ms: u64

Maximum execution time (ms)

allow_network: bool

Allow network access

allow_spawn: bool

Allow process spawning

Implementations

impl SandboxConfig

pub fn restricted() -> Self

Create a restrictive sandbox

pub fn permissive() -> Self

Create a permissive sandbox

pub fn allow_read(self, path: impl Into<PathBuf>) -> Self

Allow reading from a path

pub fn allow_write(self, path: impl Into<PathBuf>) -> Self

Allow writing to a path

pub fn allow_env(self, var: impl Into<String>) -> Self

Allow access to environment variable

pub fn with_memory_limit(self, bytes: usize) -> Self

Set memory limit

pub fn with_time_limit(self, ms: u64) -> Self

Set time limit

pub fn to_manifest(&self) -> CapabilityManifest

Convert to capability manifest

Trait Implementations

impl Clone for SandboxConfig

fn clone(&self) -> SandboxConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxConfig

fn default() -> Self

Returns the “default value” for a type.