Skip to main content

permissions_sandbox_env_policy

supercode::configfile

Function permissions_sandbox_env_policy 

Source 
pub fn permissions_sandbox_env_policy(
    cap: &CapabilityConfig,
) -> SandboxEnvPolicy
Expand description

P5-10 (§2 module 12, §3.1 capabilities.permissions.sandbox.env_policy): same parse-or-fail-safe-to-Default treatment as permissions_sandbox_escalation — an absent or unrecognized value falls back to crate::sandbox::SandboxEnvPolicy::Inherit (today’s behavior), never silently to the stricter None (that would be a surprising, unrequested behavior CHANGE, not a safe fail-closed default — env_policy narrows what a subprocess sees, it isn’t a security gate the way escalation’s fail-closed direction is).