Struct SandboxRuntimeConfig 

pub struct SandboxRuntimeConfig {
    pub network: NetworkConfig,
    pub filesystem: FilesystemConfig,
    pub ignore_violations: Option<HashMap<String, Vec<String>>>,
    pub enable_weaker_nested_sandbox: Option<bool>,
    pub ripgrep: Option<RipgrepConfig>,
    pub mandatory_deny_search_depth: Option<u32>,
    pub allow_pty: Option<bool>,
    pub seccomp: Option<SeccompConfig>,
}

Main sandbox runtime configuration.

Fields

network: NetworkConfig

Network restriction configuration.

filesystem: FilesystemConfig

Filesystem restriction configuration.

ignore_violations: Option<HashMap<String, Vec<String>>>

Violation filtering by command pattern.

enable_weaker_nested_sandbox: Option<bool>

Enable weaker nested sandbox mode.

ripgrep: Option<RipgrepConfig>

Ripgrep configuration.

mandatory_deny_search_depth: Option<u32>

Search depth for mandatory deny discovery (Linux, default: 3).

allow_pty: Option<bool>

Allow pseudo-terminal (macOS only).

seccomp: Option<SeccompConfig>

Custom seccomp configuration.

Implementations

impl SandboxRuntimeConfig

pub fn validate(&self) -> Result<(), SandboxError>

Validate the configuration.

Trait Implementations

impl Clone for SandboxRuntimeConfig

fn clone(&self) -> SandboxRuntimeConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxRuntimeConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxRuntimeConfig

fn default() -> SandboxRuntimeConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxRuntimeConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SandboxRuntimeConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.