Enum SandboxPolicy 

pub enum SandboxPolicy {
    Trusted,
    Restricted,
}

How strictly a subprocess runner should be confined.

Restricted is the default for every body. Trusted skips sandboxing and only the operator selects it (IMPROV_EXTFN_TRUSTED=1, see policy_for).

Variants

Trusted

No sandboxing applied; the interpreter runs with the caller’s full filesystem/network/resource access (still subject to the existing wall-clock timeout in runner.rs).

Restricted

bwrap + rlimits; refuses to run without bwrap unless the operator sets IMPROV_EXTFN_ALLOW_UNSANDBOXED=1 (then rlimits only).

Trait Implementations

impl Clone for SandboxPolicy

fn clone(&self) -> SandboxPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SandboxPolicy

impl Debug for SandboxPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxPolicy

fn default() -> SandboxPolicy

Returns the “default value” for a type.

impl Eq for SandboxPolicy

impl PartialEq for SandboxPolicy

fn eq(&self, other: &SandboxPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SandboxPolicy