exarch_core/security/
mod.rs

1//! Security validation modules.
2
3pub(crate) mod boundary;
4pub(crate) mod context;
5pub(crate) mod fs_view;
6pub(crate) mod hardlink;
7#[cfg(any(test, feature = "testing"))]
8pub(crate) mod path;
9pub(crate) mod permissions;
10pub(crate) mod quota;
11pub(crate) mod symlink;
12pub mod validator;
13pub(crate) mod zipbomb;
14
15// Re-export public API types
16pub use validator::EntryValidator;
17pub use validator::ValidatedEntry;
18pub use validator::ValidatedEntryType;
19pub use validator::ValidationReport;
20
21// QuotaPermit and EntryCount ride inside the unconditionally-public
22// ValidatedEntryType::File and ::Hardlink, so it must be exported ungated: a
23// `#[cfg(feature = "testing")]` re-export (as `QuotaTracker` gets below)
24// would be a private-type-in-public-interface compile error.
25pub use quota::EntryCount;
26pub use quota::QuotaPermit;
27
28// SanitizedMode rides inside the unconditionally-public
29// ValidatedEntry::mode(), so — like QuotaPermit above — it must be exported
30// ungated rather than gated behind `testing`.
31pub use permissions::SanitizedMode;
32
33// Security primitives exposed under the `testing` feature for external
34// benchmarks and integration tests that cannot access pub(crate) items.
35#[cfg(feature = "testing")]
36pub use hardlink::HardlinkTracker;
37#[cfg(feature = "testing")]
38pub use path::validate_path;
39#[cfg(feature = "testing")]
40pub use permissions::sanitize_permissions;
41#[cfg(feature = "testing")]
42pub use quota::QuotaTracker;
43#[cfg(feature = "testing")]
44pub use symlink::validate_symlink;
45#[cfg(feature = "testing")]
46pub use zipbomb::validate_compression_ratio;
exarch_core/security/mod.rs

exarch_core/security/
mod.rs
