sandlock_core/
lib.rs

1pub mod error;
2pub mod policy;
3pub mod profile;
4pub mod result;
5pub mod sandbox;
6pub(crate) mod sys;
7pub mod landlock;
8pub mod seccomp;
9pub(crate) mod resource;
10pub(crate) mod network;
11pub mod context;
12pub(crate) mod vdso;
13pub(crate) mod random;
14pub(crate) mod time;
15pub(crate) mod cow;
16pub(crate) mod checkpoint;
17pub(crate) mod procfs;
18pub(crate) mod port_remap;
19pub mod pipeline;
20pub mod policy_fn;
21pub mod image;
22pub mod fork;
23pub(crate) mod chroot;
24
25pub use error::SandlockError;
26pub use checkpoint::Checkpoint;
27pub use policy::{Policy, PolicyBuilder};
28pub use result::{RunResult, ExitStatus};
29pub use sandbox::Sandbox;
30pub use pipeline::{Stage, Pipeline};
31
32/// Query the Landlock ABI version supported by the running kernel.
33pub fn landlock_abi_version() -> Result<u32, error::ConfinementError> {
34    landlock::abi_version()
35}
36
37/// Minimum Landlock ABI version required by sandlock.
38pub const MIN_LANDLOCK_ABI: u32 = landlock::MIN_ABI;
sandlock_core/lib.rs

sandlock_core/
lib.rs
