List of all items

Structs

• Checkpoint
• context::PipePair
• dry_run::Change
• dry_run::DryRunResult
• netlink::proto::IfAddrMsg
• netlink::proto::IfInfoMsg
• netlink::proto::NlMsgHdr
• netlink::proto::ParsedRequest
• netlink::proto::RtAttr
• netlink::proto::Writer
• netlink::state::NetlinkState
• pipeline::Gather
• pipeline::NamedStage
• pipeline::Pipeline
• pipeline::Stage
• policy::ByteSize
• policy::HttpRule
• policy::Policy
• policy::PolicyBuilder
• policy_fn::LivePolicy
• policy_fn::PolicyContext
• policy_fn::PolicyEvent
• policy_fn::SyscallEvent
• result::RunResult
• sandbox::Sandbox
• seccomp::ctx::SupervisorCtx
• seccomp::dispatch::DispatchTable
• seccomp::notif::NotifPolicy
• seccomp::notif::OnInjectSuccess
• seccomp::state::ChrootState
• seccomp::state::CowState
• seccomp::state::NetworkState
• seccomp::state::PerProcessState
• seccomp::state::PidKey
• seccomp::state::PolicyFnState
• seccomp::state::ProcessIndex
• seccomp::state::ProcfsState
• seccomp::state::ResourceState
• seccomp::state::TimeRandomState

Enums

• dry_run::ChangeKind
• error::BranchError
• error::ConfinementError
• error::NotifError
• error::PolicyError
• error::SandboxError
• error::SandlockError
• error::SeccompError
• policy::BranchAction
• policy::FsIsolation
• policy_fn::PolicyFnError
• policy_fn::SyscallCategory
• policy_fn::Verdict
• result::ExitStatus
• seccomp::notif::NetworkPolicy
• seccomp::notif::NotifAction

Functions

• confine_current_process
• context::arg_filters
• context::deny_syscall_numbers
• context::no_supervisor_deny_syscall_numbers
• context::notif_syscalls
• context::syscall_name_to_nr
• image::extract
• image::inspect_cmd
• landlock::abi_version
• landlock::confine
• landlock_abi_version
• netlink::handlers::handle_bind
• netlink::handlers::handle_close
• netlink::handlers::handle_getsockname
• netlink::handlers::handle_netlink_recvmsg
• netlink::handlers::handle_socket
• netlink::proto::nlmsg_align
• netlink::proto::parse_request
• netlink::proxy::spawn_responder
• netlink::synth::synthesize_reply
• policy::http_acl_check
• policy::normalize_path
• policy::prefix_or_exact_match
• profile::list_profiles
• profile::load_profile
• profile::parse_profile
• profile::profile_dir
• sandbox::is_nested
• seccomp::bpf::assemble_filter
• seccomp::bpf::install_deny_filter
• seccomp::bpf::install_filter
• seccomp::dispatch::build_dispatch_table
• seccomp::notif::supervisor

Type Aliases

• error::Result
• policy_fn::PolicyCallback
• seccomp::dispatch::HandlerFn

Constants

• MIN_LANDLOCK_ABI
• landlock::MIN_ABI
• netlink::proto::NLMSG_ALIGN_TO
• netlink::proto::NLMSG_DONE
• netlink::proto::NLMSG_ERROR
• netlink::proto::NLMSG_HDRLEN
• netlink::proto::NLM_F_DUMP
• netlink::proto::NLM_F_MULTI
• netlink::proto::NLM_F_REQUEST
• netlink::proto::RTA_HDRLEN
• netlink::proto::RTM_GETADDR
• netlink::proto::RTM_GETLINK
• netlink::proto::RTM_NEWADDR
• netlink::proto::RTM_NEWLINK