hakoniwa 1.7.0

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45

bitflags::bitflags! {
    /// FS access flags.
    #[derive(Hash, Eq, PartialEq, Clone, Copy, Debug)]
    pub struct Access: u64 {
        const R = 1;
        const W = 1 << 1;
        const X = 1 << 2;
    }
}

impl std::fmt::Display for Access {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        let mut str = "".to_string();
        for e in [Self::R, Self::W, Self::X] {
            str.push(match *self & e {
                Self::R => 'r',
                Self::W => 'w',
                Self::X => 'x',
                _ => '-',
            });
        }
        write!(f, "{str}")
    }
}

impl std::str::FromStr for Access {
    type Err = crate::Error;

    fn from_str(str: &str) -> Result<Self, Self::Err> {
        let mut access = Self::empty();
        for e in str.chars().collect::<Vec<char>>() {
            match e.to_lowercase().to_string().as_ref() {
                "r" => access |= Self::R,
                "w" => access |= Self::W,
                "x" => access |= Self::X,
                "-" => (),
                chr => {
                    let err = format!("landlock: unknown access {chr:?}");
                    Err(Self::Err::UnError(err))?
                }
            };
        }
        Ok(access)
    }
}