Documentation
¶
Overview ¶
WARNING: commands run directly on the host OS with limited hardening only. Hardening layers applied: process-group isolation on Unix, rlimits on Linux, bwrap filesystem/network isolation on Linux. macOS local execution currently runs without additional OS sandboxing. Use the docker backend when full container isolation is required.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewFactory ¶
func NewFactory() sandboxpkg.Factory
NewFactory returns a Factory for the local backend.
Types ¶
type Factory ¶ added in v0.15.0
type Factory struct{}
Factory creates local sandbox sessions that run directly on the host OS.
func (*Factory) Available ¶ added in v0.15.0
Available always returns true — the local backend has no external dependencies.
func (*Factory) CreateSession ¶ added in v0.15.0
func (f *Factory) CreateSession(_ context.Context, policy sandboxpkg.Policy) (sandboxpkg.Session, error)
CreateSession creates a new localSession.
Source Files
Click to show internal directories.
Click to hide internal directories.