2026-07-14 00:05:23 +09:00
|
|
|
disallowed-types = [
|
2026-07-14 02:17:49 +09:00
|
|
|
{ path = "std::process::Child", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Command", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "tokio::process::Child", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "tokio::process::Command", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
2026-07-14 00:05:23 +09:00
|
|
|
]
|
|
|
|
|
|
|
|
|
|
disallowed-methods = [
|
2026-07-14 02:17:49 +09:00
|
|
|
{ path = "libc::clone", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::execve", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::execveat", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::fork", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::posix_spawn", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::sigaction", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::signal", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::vfork", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::wait", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::wait4", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::waitid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "libc::waitpid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::sys::signal::sigaction", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::sys::wait::wait", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::sys::wait::waitid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::sys::wait::waitpid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::unistd::execve", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::unistd::execveat", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::unistd::fork", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "nix::unistd::vfork", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::kill_process", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::kill_process_group", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::pidfd_open", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::pidfd_send_signal", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::waitid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "rustix::process::waitpid", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Child::kill", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Child::try_wait", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Child::wait", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Child::wait_with_output", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Command::output", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Command::spawn", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
|
|
|
|
{ path = "std::process::Command::status", reason = "low-level process control requires an explicitly exempted audited boundary" },
|
2026-07-14 00:05:23 +09:00
|
|
|
]
|