Struct ProcessSandbox 

pub struct ProcessSandbox { /* private fields */ }

Process runner backed by the host’s OS sandbox (sandbox-exec on macOS, bwrap on Linux). It fails closed when isolation is required but absent.

Implementations

impl ProcessSandbox

pub fn new( program: impl Into<String>, args: Vec<String>, policy: ProcessPolicy, ) -> Result<Self>

pub fn prepare_invocation(&self) -> Result<PreparedProcess>

Trait Implementations

impl Clone for ProcessSandbox

fn clone(&self) -> ProcessSandbox

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessSandbox

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl SandboxedCommand for ProcessSandbox

fn execute(&self) -> Result<CommandResult>

Execute the command and return the result

fn display(&self) -> String

Get the command string for display

fn is_read_only(&self) -> bool

Check if the command is read-only (no side effects)