Enum Enforcement 

pub enum Enforcement {
    SelfApplied {
        fs_enforced: bool,
    },
    ExecArgv(Vec<OsString>),
    Ran(i32),
}

How the platform enforced a SandboxPolicy — the contract between enforce and the __sandbox-exec launcher.

Variants

SelfApplied

The restrictions were installed on the current process (Linux seccomp + Landlock); the caller must now exec its own argv. fs_enforced is false when write-confinement was requested but the kernel cannot enforce it (documented best-effort — the caller warns and continues).

Fields

fs_enforced: bool

ExecArgv(Vec<OsString>)

The caller must exec this rewritten argv instead (macOS: the command wrapped in /usr/bin/sandbox-exec).

Ran(i32)

The platform ran the child itself and this is its exit code (Windows AppContainer follow-up; no constructor yet).

Trait Implementations

impl Clone for Enforcement

fn clone(&self) -> Enforcement

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Enforcement

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for Enforcement

impl PartialEq for Enforcement

fn eq(&self, other: &Enforcement) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Enforcement