Struct ProfileConfig 

pub struct ProfileConfig {

    pub extends: Option<String>,
    pub allow_write: Vec<String>,
    pub deny_read: Vec<String>,
    pub allow_read: Vec<String>,
    pub allow_domains: Vec<String>,
    pub deny_domains: Vec<String>,
    pub deny_exec: Vec<String>,
    pub allow_exec: Vec<String>,
    pub allow_fetch: Vec<String>,
    pub allow_all_network: Option<bool>,
    pub enable_proxy: Option<bool>,
    pub allow_degraded: Option<bool>,
    pub env: HashMap<String, String>,
}

A single profile configuration block from the YAML file.

Fields

extends: Option<String>

Base profile to extend from.

allow_write: Vec<String>

deny_read: Vec<String>

allow_read: Vec<String>

Linux read-allowlist extensions. macOS ignores this field.

allow_domains: Vec<String>

deny_domains: Vec<String>

Remove domains from grants established by lower-precedence sources.

deny_exec: Vec<String>

allow_exec: Vec<String>

allow_fetch: Vec<String>

Domains that build scripts are allowed to fetch from.

When non-empty, enables curl/wget execution and adds these domains to the proxy allowlist. This is the intended way to allow build-time downloads for specific crates (e.g., utoipa-swagger-ui, protobuf-src).

allow_all_network: Option<bool>

Whether to allow all network access (disables proxy and SBPL network restrictions).

enable_proxy: Option<bool>

Whether to enable the domain-filtering proxy.

allow_degraded: Option<bool>

Opt-in to proceed under a degraded kernel (Linux only). See cross-platform-backend-design.md §13 D1.

env: HashMap<String, String>

Implementations

impl ProfileConfig

pub fn apply_to( &self, profile: &mut SandboxProfile, home: &Path, pwd: &Path, origin: &GrantOrigin, ) -> Result<(), CoreError>

Apply this config’s overrides onto a SandboxProfile.

Paths are expanded relative to home (for ~) and pwd (for ./).

Trait Implementations

impl Clone for ProfileConfig

fn clone(&self) -> ProfileConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProfileConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for ProfileConfig

fn default() -> ProfileConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for ProfileConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for ProfileConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.