Struct RestoreOptions 

pub struct RestoreOptions {
    pub allow_absolute_symlinks: bool,
}

Knobs for restore_tree_with_options.

v1.0.14 audit fix: prior versions of restore_tree treated any absolute-target symlink as a hard error that aborted the whole restore. The auditor flagged this as awkward — captured trees often contain legitimate absolute symlinks (e.g. /var/log/agent) that the operator wants to keep. New behavior:

• allow_absolute_symlinks = false (default): absolute symlinks are skipped with an eprintln! warning instead of erroring. The CVE protection (PF-SA-2026-001 “Zip Slip”) is unaffected: we never WRITE through the symlink, only choose whether to create it. Skipping is a strict safety improvement over erroring (the rest of the tree restores; the operator sees what was skipped) and matches what tar/rsync do.
• allow_absolute_symlinks = true: opt-in restore of absolute symlinks verbatim. The operator explicitly acknowledges that anything later reading through the symlink may escape the sandbox.

Fields

allow_absolute_symlinks: bool

See struct docs. Default: false (skip-with-warn).

Trait Implementations

impl Clone for RestoreOptions

fn clone(&self) -> RestoreOptions

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RestoreOptions

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for RestoreOptions

fn default() -> RestoreOptions

Returns the “default value” for a type.

impl Copy for RestoreOptions