Expand description
Linux sandbox implementation using bubblewrap + seccomp.
Re-exports§
pub use bridge::check_socat;pub use bridge::generate_socket_path;pub use bridge::SocatBridge;pub use bwrap::check_bwrap;pub use bwrap::generate_bwrap_command;pub use bwrap::generate_proxy_env;pub use filesystem::generate_bind_mounts;pub use filesystem::BindMount;pub use seccomp::get_apply_seccomp_path;pub use seccomp::get_bpf_path;pub use seccomp::is_seccomp_available;
Modules§
- bridge
- Socat Unix socket bridges for Linux network sandboxing.
- bwrap
- Bubblewrap command generation for Linux sandbox.
- filesystem
- Filesystem bind mount generation for bubblewrap.
- seccomp
- Seccomp filter loading and management.