pub struct EngineLaunch<'a> {
pub binary: &'a Path,
pub args: &'a [String],
pub data_dir: Option<&'a Path>,
pub data_dir_env: Option<&'a str>,
pub data_dir_arg: Option<&'a str>,
pub forbidden_args: &'a [String],
pub env: &'a [(String, String)],
pub refusal_probe: bool,
}Expand description
Everything the guard judges about one engine, sidecar or app-engine launch, before the process
starts. env is the environment the launcher will set on the child (target values, the data
directory variable, then the caller’s values, in that order: the last value of a key wins, as
with Command::env).
Fields§
§binary: &'a PathThe program that would start; named in every refusal.
args: &'a [String]Arguments handed to the program.
data_dir: Option<&'a Path>The directory the caller passed as the launch’s data directory.
data_dir_env: Option<&'a str>Environment variable through which the target receives its data directory.
data_dir_arg: Option<&'a str>Flag through which the target takes its data directory in args (--data-dir <dir> or
--data-dir=<dir>).
forbidden_args: &'a [String]Flags the target declares as “use the real library”; a launch carrying one is refused.
env: &'a [(String, String)]The environment the child will get from the launcher.
refusal_probe: boolThe caller opted out of the isolated-directory rule to probe the engine’s own refusal.