Enum SandboxEscalation 

pub enum SandboxEscalation {
    Deny,
    Ask,
    Allow,
}

capabilities.permissions.sandbox.escalation (§3.1): what happens when a confining fs tier is requested but this platform/kernel cannot actually enforce it. Deny (the default) refuses to run the subprocess at all — the cardinal “never silently unsandboxed” rule. Ask routes the decision through crate::permissions::PermissionsApprovalHandler (P5-1’s permissions.approvals seam, wired here per this module’s build brief). Allow auto-permits an unconfined run with a loud, one-time warning.

Variants

Deny

Refuse to run the subprocess when confinement can’t be established (fail-closed; the default).

Ask

Consult the installed PermissionsApprovalHandler for a per-call decision; no handler installed denies (fail-closed, same posture PermissionsApprovalHandler’s own doc comment already documents).

Allow

Auto-permit an unconfined run, with a loud one-time warning.

Implementations

impl SandboxEscalation

pub fn rank(self) -> u8

Strictness rank — LOWER is stricter, same convention as configfile::sandbox_rank/approval_rank (Deny prompts nothing through, the strictest floor; Allow is the loosest, an unconfined run with only a warning).

pub fn parse(s: &str) -> Option<SandboxEscalation>

Parse the config string ("deny" | "ask" | "allow"), _/-/case normalized like every other sandbox-adjacent string parser in this crate (configfile::parse_sandbox_str/parse_approval_str).

Trait Implementations

impl Clone for SandboxEscalation

fn clone(&self) -> SandboxEscalation

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxEscalation

impl Debug for SandboxEscalation

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SandboxEscalation

fn default() -> SandboxEscalation

Returns the “default value” for a type.

impl Eq for SandboxEscalation

impl PartialEq for SandboxEscalation

fn eq(&self, other: &SandboxEscalation) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxEscalation