Struct SandboxEnforcer 

pub struct SandboxEnforcer {
    pub config: SandboxConfig,
}

The enforcer that guards the sandboxed arena.

Validates commands, paths, and environment variables before any subprocess is allowed to enter the containment ring.

Fields

config: SandboxConfig

The containment ring configuration.

Implementations

impl SandboxEnforcer

pub fn new(config: SandboxConfig) -> Self

Create a new enforcer with the given containment ring configuration.

pub fn with_defaults() -> Self

Create a new enforcer with default containment ring settings.

pub fn validate_command(&self, command: &str) -> Result<(), SandboxViolation>

Pre-execution validation: check a command before it enters the arena.

Detects denied command prefixes, path traversal attempts, and shell injection patterns (backticks, $(), pipes to sensitive commands).

pub fn validate_path(&self, path: &Path) -> Result<(), SandboxViolation>

Validate whether a path is accessible within the containment ring.

Canonicalizes the path, then checks denied paths first (deny always wins), followed by allowed paths. A fighter cannot reach outside its arena.

pub fn sanitize_environment(&self) -> Vec<(String, String)>

Build a clean environment — only variables that survive the containment ring.

Starts with an empty environment, then includes only variables from the allowlist that exist in the current process environment. Any variable matching a denylist pattern is filtered out, even if it appears on the allowlist.

pub fn build_command(&self, command: &str) -> Result<Command, SandboxViolation>

Build a sandboxed tokio::process::Command ready to enter the arena.

Validates the command, sets a sanitized environment via env_clear() + individual env() calls, and configures the working directory.

Trait Implementations

impl Clone for SandboxEnforcer

fn clone(&self) -> SandboxEnforcer

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxEnforcer

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.