Documentation
¶
Overview ¶
Hardening layers applied: process-group isolation on Unix, rlimits on Linux, bwrap filesystem/network isolation on Linux, macOS Seatbelt (sandbox-exec) filesystem and network isolation on macOS. Use the docker backend when full container isolation is required.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewFactory ¶
func NewFactory() sandboxpkg.Factory
NewFactory returns a Factory for the local backend.
Types ¶
type Factory ¶
type Factory struct{}
Factory creates local sandbox sessions that run directly on the host OS.
func (*Factory) Available ¶
Available always returns true — the local backend has no external dependencies.
func (*Factory) CreateSession ¶
func (f *Factory) CreateSession(_ context.Context, policy sandboxpkg.Policy) (sandboxpkg.Session, error)
CreateSession creates a new localSession.
Source Files
Click to show internal directories.
Click to hide internal directories.