Struct BashPolicy 

pub struct BashPolicy { /* private fields */ }

Semantic bash policy with safety rails.

Implementations

impl BashPolicy

pub fn new() -> Self

Create a new policy with safety rails enabled by default.

pub fn allow_command(self, command: impl Into<String>) -> Self

Allow a specific command by name (normalized).

pub fn deny_command(self, command: impl Into<String>) -> Self

Deny a specific command by name (normalized).

pub fn allow_all(self) -> Self

Allow all commands (subject to deny rules and safety rails).

pub fn deny_pipe_to_shell(self) -> Self

Deny pipes to shells (| bash, | sh, | zsh).

pub fn allow_pipe_to_shell(self) -> Self

Allow pipes to shells.

pub fn deny_command_chains(self) -> Self

Deny command chains (;, &&, ||).

pub fn allow_chains(self) -> Self

Allow command chains (;, &&, ||).

pub fn deny_eval(self) -> Self

Deny eval/exec usage.

pub fn allow_eval(self) -> Self

Allow eval/exec usage.

pub fn deny_subshells(self) -> Self

Deny subshell usage ($(), backticks, bash -c).

pub fn allow_subshells(self) -> Self

Allow subshell usage ($(), backticks, bash -c).

pub fn deny_dangerous_redirects(self) -> Self

Deny redirects to sensitive paths (e.g. /etc/*).

pub fn allow_dangerous_redirects(self) -> Self

Allow redirects to sensitive paths.

pub fn check_command(&self, command: &str) -> Result<BashTokens, String>

Check a raw command string against the policy.

pub fn check_tokens(&self, tokens: &BashTokens) -> Result<(), String>

Check tokenized command data against the policy.

Trait Implementations

impl Clone for BashPolicy

fn clone(&self) -> BashPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for BashPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for BashPolicy

fn default() -> Self

Returns the “default value” for a type.