sandlock_core/
lib.rs

1pub mod error;
2pub mod policy;
3pub mod profile;
4pub mod result;
5pub mod sandbox;
6pub(crate) mod sys;
7pub mod landlock;
8pub mod seccomp;
9pub(crate) mod resource;
10pub(crate) mod network;
11pub mod context;
12pub(crate) mod vdso;
13pub(crate) mod random;
14pub(crate) mod time;
15pub(crate) mod cow;
16pub(crate) mod checkpoint;
17pub(crate) mod procfs;
18pub(crate) mod port_remap;
19pub mod pipeline;
20pub mod policy_fn;
21pub mod image;
22pub mod fork;
23pub(crate) mod chroot;
24pub mod dry_run;
25
26pub use error::SandlockError;
27pub use checkpoint::Checkpoint;
28pub use policy::{Policy, PolicyBuilder};
29pub use result::{RunResult, ExitStatus};
30pub use sandbox::Sandbox;
31pub use pipeline::{Stage, Pipeline};
32pub use dry_run::{Change, ChangeKind, DryRunResult};
33
34/// Query the Landlock ABI version supported by the running kernel.
35pub fn landlock_abi_version() -> Result<u32, error::ConfinementError> {
36    landlock::abi_version()
37}
38
39/// Minimum Landlock ABI version required by sandlock.
40pub const MIN_LANDLOCK_ABI: u32 = landlock::MIN_ABI;
sandlock_core/lib.rs

sandlock_core/
lib.rs
