Struct Landlock 

pub struct Landlock {
    pub read_paths: Vec<PathBuf>,
    pub write_paths: Vec<PathBuf>,
    pub execute_paths: Vec<PathBuf>,
}

Landlock filesystem and network access control configuration.

Landlock is a Linux security module (LSM) that provides fine-grained filesystem and network access control for unprivileged processes.

Example

use evalbox_sandbox::Landlock;

let landlock = Landlock::default()
    .allow_read("/etc")
    .allow_read_write("/tmp/output")
    .allow_execute("/usr/bin");

Fields

read_paths: Vec<PathBuf>

Paths with read access.

write_paths: Vec<PathBuf>

Paths with read-write access.

execute_paths: Vec<PathBuf>

Paths with execute access.

Implementations

impl Landlock

pub fn new() -> Self

Create a new Landlock config.

pub fn allow_read(self, path: impl Into<PathBuf>) -> Self

Allow read access to a path.

pub fn allow_read_write(self, path: impl Into<PathBuf>) -> Self

Allow read-write access to a path.

pub fn allow_execute(self, path: impl Into<PathBuf>) -> Self

Allow execute access to a path.

Trait Implementations

impl Clone for Landlock

fn clone(&self) -> Landlock

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Landlock

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Landlock

fn default() -> Landlock

Returns the “default value” for a type.