Enum Runner 

pub enum Runner {
    Sandboxed(Sandboxed),
    Plain,
}

A sandboxed or a plain runner.

Variants

Sandboxed(Sandboxed)

Confined.

Plain

Not confined.

Implementations

impl Runner

pub fn carve( self, read_only: &[PathBuf], hidden: &[PathBuf], ) -> (Self, Option<String>)

In place: read_only and hidden carved out of the profile, and what the person must know when this machine cannot. A plain runner confines nothing, so there is nothing to carve.

impl Runner

pub fn is_sandboxed(&self) -> bool

Whether commands are confined (the network rule then matters).

pub fn with_writable(self, dir: &Path) -> Self

The same runner, dir writable too.

pub fn allows_network(&self, argv: &[String]) -> bool

Whether argv gets the network by [sandbox] network_allow (or a prefix): never for a plain runner, which asks nobody.

pub fn run_with(&self, inv: &Invocation, network: bool) -> Outcome

Runs inv; network (a person’s approval) widens the network.

pub fn scratch(&self) -> Option<PathBuf>

Where commands may write scratch files: the sandbox’s private temporary directory (created), or None unsandboxed.

pub fn wrap( &self, argv: &[String], ) -> Result<(Vec<String>, Option<PathBuf>), String>

argv as it will be started (for long-running servers started elsewhere).

Trait Implementations

impl Clone for Runner

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CommandRunner for Runner

fn run(&self, inv: &Invocation) -> Outcome

Runs inv to completion or deadline.

impl Debug for Runner

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.