sandbox

package
v0.17.1 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 14, 2026 License: GPL-3.0 Imports: 27 Imported by: 0

Documentation

Index

Constants

View Source 
const (
	TmpDir           = "/tmp"
	SharedMemoryPath = "/dev/shm"
)

Variables

View Source 
var ErrNoShell = errors.New("commands require " + shell + "; please install bash")

Functions

func AreUnixSocketsReachable 

func AreUnixSocketsReachable() bool

func Available 

func Available() error

func BaselineExecutablePaths added in v0.11.0 

func BaselineExecutablePaths() []string

func BaselineReadablePaths 

func BaselineReadablePaths() []string

func BaselineWritablePaths added in v0.11.0 

func BaselineWritablePaths() []string

func FindDenyPaths added in v0.9.0 

func FindDenyPaths(patterns []string, root string) ([]string, error)

func FindDenyPathsSkipping added in v0.15.0 

func FindDenyPathsSkipping(patterns []string, root string, skip string) ([]string, error)

func FirstSymlinkBeneath 

func FirstSymlinkBeneath(path string, writableRoots []string) (string, bool)

func Init 

func Init()

func IsIPv6Reachable 

func IsIPv6Reachable() bool

func KillNotice 

func KillNotice(result Result, policy Policy) string

func OverrunNotice 

func OverrunNotice(result Result, policy Policy) string

func RuntimeReadablePaths added in v0.11.0 

func RuntimeReadablePaths() []string

func RuntimeWritablePaths added in v0.11.0 

func RuntimeWritablePaths() []string

func Supported 

func Supported(ctx context.Context) error

Types

type ArgvRunner added in v0.14.0 

type ArgvRunner interface {
	RunArgv(ctx context.Context, directory string, arguments []string, policy Policy) (Result, error)
	StartArgv(
		ctx context.Context,
		directory string,
		arguments []string,
		policy Policy,
		output Output,
	) (Command, error)
}

func ArgvFor added in v0.17.1 

func ArgvFor(isUnconfined bool) ArgvRunner

func DirectArgv added in v0.14.0 

func DirectArgv() ArgvRunner

func UnconfinedArgv added in v0.14.0 

func UnconfinedArgv() ArgvRunner

type Command 

type Command interface {
	Wait() (Result, error)
	Signal(signal syscall.Signal) error
	Stop()
}

type DenySearch added in v0.9.0