Enum PathPolicy 

pub enum PathPolicy {
    Unrestricted,
    Within(Vec<PathBuf>),
}

Where a tool may write when the caller names a path on this machine.

In this release the tier is what confines host filesystem access: those tools sit at the write tier and no higher, so a read-only session reaches none of them. The allow-list is the mechanism meant to confine them further, and it is here rather than in a comment so that switching it on is a matter of populating one value: every tool that takes a path already asks.

Variants

Unrestricted

Any path the caller names. What this release ships.

Within(Vec<PathBuf>)

Only paths under one of these roots.

Implementations

impl PathPolicy

pub fn permits(&self, path: &Path) -> bool

Whether this policy would let a tool write to path.

Trait Implementations

impl Clone for PathPolicy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PathPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PathPolicy

fn default() -> Self

Returns the “default value” for a type.

impl Eq for PathPolicy

impl PartialEq for PathPolicy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PathPolicy