nono 0.65.1

Capability-based sandboxing library using Landlock (Linux) and Seatbelt (macOS)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22

//! Structured sandbox diagnostics for library and binding clients.
//!
//! Denial records, stable codes, remediations, and session reports. Footer
//! text and CLI flag formatting live in `nono-cli`.

mod codes;
mod detail;
mod observation;
mod records;
mod report;

pub use codes::{NonoDiagnostic, NonoDiagnosticCode, NonoDiagnosticSeverity, NonoRemediation};
pub use detail::{NonoDiagnosticDetail, StderrObservationKind};
pub use observation::{
    SessionObservationInput, diagnostic_application_failure, diagnostic_likely_sandbox_path,
    diagnostic_missing_path, diagnostic_network_blocked, diagnostic_protected_file_write,
    follow_up_diagnostics,
};
pub use records::{
    DenialReason, DenialRecord, IpcDenialRecord, SandboxViolation, seatbelt_operation_to_access,
};
pub use report::{SessionDiagnosticReport, dedupe_denials, filesystem_denials_from_violations};