Documentation
¶
Overview ¶
SPDX-License-Identifier: AGPL-3.0-or-later Derived from internal/tasks/safeopen/at_linux.go at 25971bda1ca1664d8a546d751cb2bb9bbd454daf. Kept private to the Core observer to preserve decision 0397 component separation.
SPDX-License-Identifier: AGPL-3.0-or-later Derived from internal/tasks/safeopen/open_unix.go at 25971bda1ca1664d8a546d751cb2bb9bbd454daf. Kept private to the Core observer to preserve decision 0397 component separation. Package safeopen provides the narrow no-follow opening boundary for local stores. Every directory component is opened atomically with O_DIRECTORY|O_NOFOLLOW.
Index ¶
Constants ¶
const Supported = true
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Directory ¶
type Directory struct {
// contains filtered or unexported fields
}
Directory retains a pinned root without exposing filesystem mutators.
func Root ¶
Root pins the absolute directory, refusing symlinks in any component. The descriptor-only /dev/fd bridge is used because Go exposes no File-to-Root constructor. The source descriptor stays pinned until conversion AND identity comparison finish. An absent or non-equivalent bridge fails closed.
type File ¶
type File struct {
// contains filtered or unexported fields
}
File exposes only observation operations on a descriptor opened O_RDONLY.
Source Files