Expand description
Linux sealed-memfd mappings and authenticated descriptor transfer.
Structs§
- Authenticated
Channel - Authenticated private control channel with a pollable peer-lifecycle handle.
- Child
Session - Owned exact child process, authenticated control channel, and cleanup ledger.
- Exported
Reader Capability - Sealed descriptor intended for one authenticated reader transfer.
- Linux
Reader Mapping - Platform-minted read-only witness retaining the received fd and mapping.
- Linux
Writer Mapping - Platform-minted sole-writer witness retaining the memfd and mapping lifetime.
- Peer
Credentials - Kernel-authenticated Unix peer identity.
- Prepared
Writer - Sealed sole-writer mapping awaiting export/commit.
- Quiescent
Region - Quiescent owner of an anonymous, page-rounded, writable memfd mapping.
Enums§
- Linux
Error - Linux mapping, descriptor-transfer, or peer-authentication failure.
Functions§
- connect_
spawned_ helper - Connects the spawned helper using inherited freshness and expected-parent data.
- status
- Reports an enforced sealed-memfd backend on supported Linux kernels.