Trait SandboxProfile

pub trait SandboxProfile: Send {
    // Required method
    fn apply(&mut self, builder: &mut ProcessBuilder<'_>);

    // Provided method
    fn finalize(&mut self) -> Result<()> { ... }
}

Sandbox profile trait used for mesh hosts.

Required Methods

fn apply(&mut self, builder: &mut ProcessBuilder<'_>)

Apply executes in the parent context and configures any sandbox features that will be applied to the newly created process via the pal builder object.

Provided Methods

fn finalize(&mut self) -> Result<()>

Finalize is intended to execute in the child process context after application specific initialization is complete. It’s optional as not every sandbox profile will need to perform additional sandboxing. In addition, the child will need to be aware enough to instantiate its sandbox profile and invoke this method.

Implementors