vetto 0.2.17

Daemon-less sandbox + security layer for AI coding agents (Landlock/Seatbelt, TUI statusline, post-session audit reports)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56

//! Post-load sanity checks producing warnings (never hard failures unless
//! something makes enforcement impossible).

use std::path::PathBuf;

use super::types::Policy;

const SYSTEM_WRITE_ROOTS: [&str; 8] = [
    "/", "/usr", "/bin", "/sbin", "/lib", "/lib64", "/etc", "/boot",
];

pub fn check(policy: &mut Policy) {
    // Writing to system locations is almost always a misconfiguration.
    for w in &policy.allow_write {
        let canonical = std::fs::canonicalize(w).unwrap_or_else(|_| w.clone());
        if SYSTEM_WRITE_ROOTS.contains(&canonical.to_string_lossy().as_ref()) {
            policy.warnings.push(format!(
                "allow_write includes system path '{}' — this effectively disables filesystem isolation",
                w.display()
            ));
        }
    }

    // Reading $HOME wholesale exposes every secret by definition.
    if let Some(home) = home_dir() {
        if policy
            .allow_read
            .iter()
            .any(|p| std::fs::canonicalize(p).map(|c| c == home).unwrap_or(false))
        {
            policy.warnings.push(
                "allow_read includes $HOME itself — all user secrets are readable \
                 regardless of display_only_deny"
                    .to_string(),
            );
        }
    }

    // Non-existent write roots make enforcement impossible -> drop loudly.
    policy.allow_write.retain(|p| {
        let exists = p.exists();
        if !exists {
            policy.warnings.push(format!(
                "allow_write path '{}' does not exist; dropped",
                p.display()
            ));
        }
        exists
    });
}

fn home_dir() -> Option<std::path::PathBuf> {
    std::env::var_os("HOME")
        .or_else(|| std::env::var_os("USERPROFILE"))
        .map(PathBuf::from)
}