sandspy 0.1.1

Real-time security monitor for AI coding agents
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33

// sandspy::platform::linux — Linux-specific enhancements

use std::collections::HashSet;
use std::fs;
use std::path::PathBuf;

pub fn process_tree(pid: u32) -> Vec<u32> {
    let task_root = PathBuf::from(format!("/proc/{pid}/task"));
    let entries = match fs::read_dir(&task_root) {
        Ok(value) => value,
        Err(_) => return Vec::new(),
    };

    let mut children = HashSet::new();
    for entry in entries.flatten() {
        let tid = entry.file_name().to_string_lossy().to_string();
        let children_path = task_root.join(tid).join("children");
        let content = match fs::read_to_string(children_path) {
            Ok(value) => value,
            Err(_) => continue,
        };

        for token in content.split_whitespace() {
            if let Ok(child_pid) = token.parse::<u32>() {
                children.insert(child_pid);
            }
        }
    }

    let mut output = children.into_iter().collect::<Vec<_>>();
    output.sort_unstable();
    output
}