sandbox.h

Go to the documentation of this file.

// SPDX-License-Identifier: 0BSD
 
//
//
//  Author:     Lasse Collin
//
 
#if defined(HAVE_PLEDGE) || defined(HAVE_LINUX_LANDLOCK) \
        || defined(HAVE_CAP_RIGHTS_LIMIT)
#   define ENABLE_SANDBOX 1
#endif
 
 
extern void sandbox_init(void);
 
 
extern void sandbox_enable_read_only(void);
 
 
extern void sandbox_allow_strict(void);
 
 
extern void sandbox_enable_strict_if_allowed(
        int src_fd, int pipe_event_fd, int pipe_write_fd);