restrict 0.2.1

A crate to allow, deny, or trace Linux syscalls with an ergonomic, auto-generated enum customized for your system architecture.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

use std::fs::File;
use std::io::Write;
use std::process;

use restrict::policy::Policy;
use restrict::syscall::Syscall;

fn main() {
    let mut policy = Policy::allow_all().expect("Failed to create policy");
    policy.deny(Syscall::Write);
    policy.apply().expect("could not apply the policy");
    let file = File::create("test.txt");
    if let Ok(mut file) = file {
        if let Err(e) = writeln!(file, "This is a test.") {
            eprintln!("Error writing to file: {}", e);
            process::exit(1);
        }
    } else {
        eprintln!("Failed to create file.");
        process::exit(1);
    }

    // If write and file creation succeed, print a success message
    println!("File operations successful!");
}