Struct LandlockRuleset 

pub struct LandlockRuleset {
    pub read_paths: Vec<String>,
    pub read_write_paths: Vec<String>,
    pub interpreter: String,
}

Describes which filesystem paths the Landlock sandbox should allow. Deny-all by default; explicitly listed paths get read or read+write access.

Fields

read_paths: Vec<String>

read_write_paths: Vec<String>

interpreter: String

Implementations

impl LandlockRuleset

pub fn new(allowed_read_paths: &[&Path], interpreter_path: &str) -> Self

pub fn contains_read_path(&self, path: &str) -> bool

pub fn contains_rw_path(&self, path: &str) -> bool