localfs

Documentation

Overview

Package localfs rejects known network, userspace, and unknown filesystem classes before Hecate performs sensitive in-process reads. This bounds repository-selected remote/FUSE exposure; it cannot make a failing physical local device synchronously cancellable.

Index

• Variables
• func EnsureBoundedFile(file *os.File) error
• func EnsureBoundedPath(path string) error
• func EnsureBoundedTree(path string) error
• func PathWithinDirectory(root, candidate string) bool
• type Inspector
  • func NewInspector() (*Inspector, error)
  • func (inspector *Inspector) EnsurePath(path string) error
  • func (inspector *Inspector) EnsureTree(path string) error

Variables

var ErrUnboundedFilesystem = errors.New("path is not on a bounded local filesystem")

Functions

func EnsureBoundedFile

func EnsureBoundedFile(file *os.File) error

func EnsureBoundedPath

func EnsureBoundedPath(path string) error

func EnsureBoundedTree

func EnsureBoundedTree(path string) error

func PathWithinDirectory

func PathWithinDirectory(root, candidate string) bool

PathWithinDirectory reports whether candidate is root or one of its descendants using the host platform's ordinary filepath semantics.

Types

type Inspector

type Inspector struct {
	// contains filtered or unexported fields
}

func NewInspector

func NewInspector() (*Inspector, error)

func (*Inspector) EnsurePath

func (inspector *Inspector) EnsurePath(path string) error

func (*Inspector) EnsureTree

func (inspector *Inspector) EnsureTree(path string) error