Struct landlock::PathBeneath

pub struct PathBeneath<F> { /* private fields */ }

Landlock rule for a file hierarchy.

Example

use landlock::{AccessFs, PathBeneath, PathFd, PathFdError};

fn home_dir() -> Result<PathBeneath<PathFd>, PathFdError> {
    Ok(PathBeneath::new(PathFd::new("/home")?, AccessFs::ReadDir))
}

Implementations

impl<F> PathBeneath<F>

where F: AsFd,

pub fn new<A>(parent: F, access: A) -> Self

where A: Into<BitFlags<AccessFs>>,

Creates a new PathBeneath rule identifying the parent directory of a file hierarchy, or just a file, and allows access on it. The parent file descriptor will be automatically closed with the returned PathBeneath.

Trait Implementations

impl<F> Compatible for &mut PathBeneath<F>

fn set_compatibility(self, level: CompatLevel) -> Self

To enable a best-effort security approach, Landlock features that are not supported by the running system are silently ignored by default, which is a sane choice for most use cases. However, on some rare circumstances, developers may want to have some guarantees that their applications will not run if a certain level of sandboxing is not possible. If we really want to error out when not all our requested requirements are met, then we can configure it with set_compatibility().

fn set_best_effort(self, best_effort: bool) -> Self

where Self: Sized,

👎Deprecated: Use set_compatibility() instead

Cf. set_compatibility():

impl<F> Compatible for PathBeneath<F>

fn set_compatibility(self, level: CompatLevel) -> Self

To enable a best-effort security approach, Landlock features that are not supported by the running system are silently ignored by default, which is a sane choice for most use cases. However, on some rare circumstances, developers may want to have some guarantees that their applications will not run if a certain level of sandboxing is not possible. If we really want to error out when not all our requested requirements are met, then we can configure it with set_compatibility().

fn set_best_effort(self, best_effort: bool) -> Self

where Self: Sized,

👎Deprecated: Use set_compatibility() instead

Cf. set_compatibility():

impl<F> Rule<AccessFs> for PathBeneath<F>

where F: AsFd,