ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Enforce sandbox causal edge stdio policies

Browse source
This commit is contained in:
ms2k 2026-07-15 19:25:50 +09:00
commit 903ff837d6
1 changed files with 185 additions and 33 deletions
Download patch file Download diff file Expand all files Collapse all files

10
crates/lazaret-host-coordinator/src/runtime.rs
View file

@ -2,7 +2,6 @@ use std::fmt;
use std::io;
use std::os::unix::ffi::OsStrExt;
use std::path::Path;
use std::process::Stdio;
use std::time::{Duration, Instant};
use lazaret_core::identity::{
@ -14,9 +13,7 @@ use lazaret_core::records::{
StagedProcessOwnership,
};
use lazaret_linux::ipc::private_stream_pair;
use lazaret_linux::process::{
ChildStandardIo, RetainedProcess, child_broker, current_process_identity,
};
use lazaret_linux::process::{RetainedProcess, child_broker, current_process_identity};
use lazaret_runtime_supervisor::supervision::{
AttachedRunscSignal, CoordinatorChannel, RuntimeSupervisorLaunch, SupervisorEvent,
};
@ -373,10 +370,7 @@ impl AwaitingAttachedRunsc {
parent,
launch.ownership(),
launch.target(),
ChildStandardIo::redirected(
Stdio::from(supervisor_control),
Stdio::from(supervisor_lifetime),
),
launch.child_standard_io(supervisor_control, supervisor_lifetime)?,
|staged| {
coordinator
.stage_runtime_supervisor(staged)