Enum Confinement 

pub enum Confinement {
    Seatbelt(PathBuf),
    Landlock(i32),
    Refused(String),
    Overlay(Arc<Overlay>),
}

How a sandboxed task’s commands are held to what it declares.

Variants

Seatbelt(PathBuf)

macOS: a Seatbelt profile, through sandbox-exec.

Landlock(i32)

Linux: a Landlock rule set’s descriptor, which each command restricts itself to before it starts. It stays open while the run lasts.

Refused(String)

Enforced, and could not be held to its plan, for this reason: its commands fail rather than start unconfined.

Overlay(Arc<Overlay>)

Linux: each command runs in its own user and mount namespace over an overlay of the workspace, whose upper layer the sandbox reads when the task ends.

Trait Implementations

impl Clone for Confinement

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Confinement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.