linprov 0.2.21

eBPF mark-of-the-web for Linux: tag network-touched files and enforce who can exec them.
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

[package]
name = "linprov"
# Userspace daemon — what `cargo install linprov` ships. Bump 0.0.x for
# fixes / log tweaks / docs; 0.x → 0.(x+1) for CLI surface changes
# (mode/flags/env vars) or new operational behavior.
version = "0.2.21"
edition.workspace = true
authors.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
description.workspace = true
keywords.workspace = true
categories.workspace = true
readme = "../README.md"
rust-version.workspace = true

[[bin]]
name = "linprov"
path = "src/main.rs"

[dependencies]
aya = { workspace = true }

anyhow.workspace = true
bytemuck.workspace = true
clap.workspace = true
env_logger.workspace = true
libc.workspace = true
log.workspace = true
serde.workspace = true
tokio.workspace = true
toml.workspace = true
xattr.workspace = true

# `linprov notify` tray agent only. StatusNotifierItem tray (`ksni`,
# blocking API — its own thread, no async runtime needed here) plus
# send-only desktop notifications (`notify-rust`). Both reach the user
# session bus via D-Bus.
ksni = { version = "0.3", default-features = false, features = ["blocking", "tokio"] }
notify-rust = "4"
png = "0.17"

linprov-common = { workspace = true, features = ["user"] }

[build-dependencies]
# Used by build.rs to locate linprov-ebpf's source tree
# (via `linprov_ebpf::SOURCE_DIR`) and drive the nested
# `cargo build --target bpfel-unknown-none` for the BPF object.
linprov-ebpf = { workspace = true }

[dev-dependencies]
tempfile = "3"