Struct landlock::NetPort

pub struct NetPort { /* private fields */ }

Landlock rule for a network port.

Example

use landlock::{AccessNet, NetPort};

fn bind_http() -> NetPort {
    NetPort::new(80, AccessNet::BindTcp)
}

Implementations

impl NetPort

pub fn new<A>(port: u16, access: A) -> Self

where A: Into<BitFlags<AccessNet>>,

Creates a new TCP port rule.

As defined by the Linux ABI, port with a value of 0 means that TCP bindings will be allowed for a port range defined by /proc/sys/net/ipv4/ip_local_port_range.

Trait Implementations

impl Compatible for &mut NetPort

fn set_compatibility(self, level: CompatLevel) -> Self

To enable a best-effort security approach, Landlock features that are not supported by the running system are silently ignored by default, which is a sane choice for most use cases. However, on some rare circumstances, developers may want to have some guarantees that their applications will not run if a certain level of sandboxing is not possible. If we really want to error out when not all our requested requirements are met, then we can configure it with set_compatibility().

fn set_best_effort(self, best_effort: bool) -> Self

where Self: Sized,

👎Deprecated: Use set_compatibility() instead

Cf. set_compatibility():

impl Compatible for NetPort

fn set_compatibility(self, level: CompatLevel) -> Self

To enable a best-effort security approach, Landlock features that are not supported by the running system are silently ignored by default, which is a sane choice for most use cases. However, on some rare circumstances, developers may want to have some guarantees that their applications will not run if a certain level of sandboxing is not possible. If we really want to error out when not all our requested requirements are met, then we can configure it with set_compatibility().

fn set_best_effort(self, best_effort: bool) -> Self

where Self: Sized,

👎Deprecated: Use set_compatibility() instead

Cf. set_compatibility():

impl Rule<AccessNet> for NetPort