Enum Placement 

pub enum Placement {
    Sandbox,
    Host,
}

Where a host command runs. The safe arm is what a call gets when it says nothing, because an agent that already knew a command was dangerous would not need to be told to sandbox it.

Variants

Sandbox

In the confinement Confinement::detect reports: a copy of the working tree, and the platform’s own isolation where there is a wrapper for it.

Host

Where it stands, on the room the run may write in. This is the placement a person decides on; a command that needs it asks for it by name.

Implementations

impl Placement

pub fn opened_by(self, setup: &ExecSetup) -> Result<Placement, AxError>

This placement, when the run’s write limit opens it.

A command on the host could change, remove or link any file it reaches, and nothing on this machine makes the existing ones read-only to it without administrator rights, so under Create only the copy is open; what a command writes there stays there (crates/runtime/spec/Tools.lean §8-55, runtime D11).

Errors

The refusal of kernel::gate::replacing, naming the run’s domain, before any process starts.

Trait Implementations

impl Clone for Placement

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Placement

impl Debug for Placement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Placement

impl PartialEq for Placement

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Placement