Documentation
¶
Overview ¶
Package profiles holds the generated-policy TEMPLATES this repository ships, and it exists so that the tool and tools/sandboxcheck fill ONE text rather than two (SPEC-SANDBOX rule 15, and the work list's "the file is embedded with go:embed").
The go:embed directive cannot reach outside its own directory, so the embed lives beside the template rather than in pkg/sandbox. Nothing else belongs here: this package carries no logic, so that the only way the profile text can change is by editing the template a reader can read.
Index ¶
Constants ¶
This section is empty.
Variables ¶
var DarwinTemplate string
DarwinTemplate is profiles/darwin.sb.tmpl verbatim, markers and all. The generator in pkg/sandbox replaces the five marker lines the template's own header documents.
Functions ¶
This section is empty.
Types ¶
This section is empty.
Source Files