Struct Sandboxed 

pub struct Sandboxed {
    pub profile: Profile,
    pub backend: Backend,
    pub network_allow: Vec<Vec<String>>,
    pub network_allow_prefix: Vec<Vec<String>>,
}

A runner that confines every command.

Fields

profile: Profile

The confinement.

backend: Backend

The OS mechanism.

network_allow: Vec<Vec<String>>

Exact commands that get the network.

network_allow_prefix: Vec<Vec<String>>

Prefixes (two elements or more) that get it.

Implementations

impl Sandboxed

pub fn network_for(&self, argv: &[String]) -> Network

The network argv gets: its profile’s, or all of it for an allowed command (exactly, or extending an allowed prefix).

pub fn run_with_network(&self, inv: &Invocation, network: Network) -> Outcome

Runs inv with network instead of the profile’s.

Trait Implementations

impl Clone for Sandboxed

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl CommandRunner for Sandboxed

fn run(&self, inv: &Invocation) -> Outcome

Runs inv to completion or deadline.

impl Debug for Sandboxed

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.