Struct SystemCapabilities 

pub struct SystemCapabilities {
    pub has_root: bool,
    pub has_user_namespaces: bool,
    pub has_seccomp: bool,
    pub has_landlock: bool,
    pub has_cgroup_v2: bool,
    pub has_cgroup_delegation: bool,
}

Detected system capabilities for sandboxing

Fields

has_root: bool

Running as root (euid == 0)

has_user_namespaces: bool

Unprivileged user namespaces are available

has_seccomp: bool

Seccomp BPF filtering is available

has_landlock: bool

Landlock LSM is available (Linux 5.13+)

has_cgroup_v2: bool

Cgroup v2 unified hierarchy is mounted

has_cgroup_delegation: bool

Cgroup delegation is available for current user

Implementations

impl SystemCapabilities

pub fn detect() -> SystemCapabilities

Detect all available capabilities on the current system

pub fn can_sandbox_unprivileged(&self) -> bool

Check if unprivileged sandboxing is possible (without root)

pub fn can_sandbox_privileged(&self) -> bool

Check if full privileged sandboxing is possible

pub fn summary(&self) -> String

Get a human-readable summary of capabilities

Trait Implementations

impl Clone for SystemCapabilities

fn clone(&self) -> SystemCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SystemCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.