Struct FileSystemRestrictions 

pub struct FileSystemRestrictions {
    pub allowed_paths: Vec<PathBuf>,
    pub read_only: bool,
    pub max_path_depth: usize,
    pub follow_symlinks: bool,
}

File system restrictions configuration

Fields

allowed_paths: Vec<PathBuf>

Allowed paths (whitelist) - only these paths and subdirectories are accessible

read_only: bool

Read-only mode - no write operations allowed

max_path_depth: usize

Maximum path depth to prevent deep directory attacks

follow_symlinks: bool

Follow symlinks (risky if enabled)

Implementations

impl FileSystemRestrictions

pub fn deny_all() -> Self

Create a restrictive configuration (deny all)

pub fn read_only(allowed_paths: Vec<PathBuf>) -> Self

Create a read-only configuration for specific paths

pub fn read_write(allowed_paths: Vec<PathBuf>) -> Self

Create a read-write configuration for specific paths (use with caution)

pub fn validate_read_path(&self, path: &Path) -> Result<PathBuf>

Validate a path for read access

Security

This method performs:

1. Path canonicalization to resolve .. and symlinks
2. Path depth validation
3. Whitelist checking
4. Path traversal attack detection

pub fn validate_write_path(&self, path: &Path) -> Result<PathBuf>

Validate a path for write access

Trait Implementations

impl Clone for FileSystemRestrictions

fn clone(&self) -> FileSystemRestrictions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FileSystemRestrictions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for FileSystemRestrictions

fn default() -> Self

Returns the “default value” for a type.