evalbox_sandbox/isolation/mod.rs
1//! Isolation mechanisms for sandboxed processes.
2//!
3//! This module contains all the security isolation layers:
4//!
5//! - **lockdown** - Security restrictions (Landlock v5, seccomp, securebits, capabilities)
6//! - **rlimits** - Resource limits (memory, CPU, files, processes)
7
8mod lockdown;
9pub mod rlimits;
10
11pub use lockdown::{LockdownError, close_extra_fds, lockdown};