Enum SymlinkPolicy 

pub enum SymlinkPolicy {
    Deny,
    Opaque,
    Follow,
}

Per-mount symlink policy. Picks the right shape of symlink support for the trust level of what’s running in the VM.

All three modes use O_NOFOLLOW on host-side path ops; the policy gates (a) whether the guest can create symlinks at all and (b) whether existing host symlinks pointing OUTSIDE the mount root are visible/traversable.

Variants

Deny

Guest cannot create symlinks (FUSE_SYMLINK → EPERM) and cannot create hard links (FUSE_LINK → EPERM). Existing host symlinks whose canonical target leaves the mount root are rejected with EACCES at LOOKUP. Use for paranoid mounts where you want pure file content with no metadata surprises.

Opaque

Guest can create symlinks; targets are stored as opaque bytes (the host never resolves them — POSIX symlink(2) semantics). Existing external host symlinks are rejected at LOOKUP under the same rule as Deny. This is the safe-multi-tenant default: npm/pnpm/yarn all work, but a hostile guest can’t trick the host into walking outside the mount root via a planted /escape -> /etc/shadow symlink.

Follow

Guest can create symlinks; external host symlinks (those resolving outside the canonical mount root) are followed unconditionally. Use ONLY for trusted single-tenant workloads where the mount tree may legitimately reference absolute host paths (e.g. ~/.cache from a dev tree). This is the equivalent of the pre-0.5.5 allow_external_symlinks: true.

Trait Implementations

impl Clone for SymlinkPolicy

fn clone(&self) -> SymlinkPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SymlinkPolicy

impl Debug for SymlinkPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SymlinkPolicy

fn default() -> SymlinkPolicy

Returns the “default value” for a type.

impl Eq for SymlinkPolicy

impl PartialEq for SymlinkPolicy

fn eq(&self, other: &SymlinkPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for SymlinkPolicy