pub struct SandboxHostCapability {
pub name: String,
pub reason: Option<String>,
pub supported: bool,
}Expand description
Whether this host can run one sandbox policy feature. A session whose effective policy uses an unsupported feature fails each sandboxed command with reason.
Experimental. This type is part of an experimental wire-protocol surface and may change or be removed in future SDK or CLI releases.
Fields§
§name: StringThe policy feature, as an extensible string: ignore names you do not recognize. Known values: network (sandboxed commands can reach the network; on Linux this needs the tooling for Bubblewrap’s private network namespace, such as slirp4netns), network_filtering (host rules and the sandbox proxy; on Linux this needs the same tooling as network; on Windows it needs Process Security Environment 1.1 host-loopback support, and a policy that uses it must also set network.allowLocalNetwork), denied_paths (native enforcement of filesystem.deniedPaths), and shell (shell commands inside the sandbox; on Windows this needs Process Security Environment 1.1 filesystem enumeration support).
reason: Option<String>Human-readable reason and remedy when the feature is unsupported, such as a package to install or an OS update. Present only when supported is false.
supported: boolWhether this host can run the feature.