Expand description

extrasafe is a library that makes it easy to improve your program’s security by selectively allowing the syscalls it can perform via the Linux kernel’s seccomp facilities.

See the SafetyContext struct’s documentation and the tests/ and examples/ directories for more information on how to use it.

Modules

Built-in RuleSets

Structs

A seccomp rule.

A struct representing a set of rules to be loaded into a seccomp filter and applied to the current thread, or all threads in the current process.

Enums

The error type produced by SafetyContext

Traits

A RuleSet is a collection of seccomp Rules that enable a functionality.