Skip to main content

heimdall_core/
lib.rs

1//! Reusable sandbox runtime behavior.
2
3mod child;
4mod environment;
5mod error;
6mod executor;
7mod outcome;
8mod request;
9#[cfg(unix)]
10mod signal;
11
12pub use error::{Error, SANDBOX_MISCONFIGURATION_EXIT_CODE};
13pub use executor::Executor;
14
15/// Apply the Landlock read-rejection universe planned by the Linux sandbox.
16#[cfg(target_os = "linux")]
17pub use heimdall_linux_sandbox::restrict_fs_read_universe;
18pub use heimdall_sandbox_policy::{
19    AgentPolicy, FilesystemPolicy, NetworkMode, ProcMode, validate_filesystem_policy,
20};
21pub use request::{EnvPolicy, ExecRequest, StdioPolicy, validate_cwd};
22
23/// Result type for sandbox runtime operations.
24pub type Result<T> = std::result::Result<T, Error>;