#freebsd #sandbox

sys casper-sys

FFI bindings for FreeBSD's libcasper

3 releases

new 0.1.2 Oct 14, 2024
0.1.1 Aug 7, 2023
0.1.0 Feb 16, 2023

#17 in #freebsd

Download history 6/week @ 2024-07-15 3/week @ 2024-07-22 6/week @ 2024-07-29 7/week @ 2024-08-05 8/week @ 2024-08-12 9/week @ 2024-08-19 16/week @ 2024-08-26 10/week @ 2024-09-02 10/week @ 2024-09-09 8/week @ 2024-09-16 16/week @ 2024-09-23 5/week @ 2024-09-30 17/week @ 2024-10-07 226/week @ 2024-10-14

264 downloads per month
Used in 4 crates (2 directly)

MPL-2.0 license

9KB
110 lines

capsicum

Current Version

Contain the awesome!

Rust bindings for the FreeBSD capsicum framework for OS capability and sandboxing

Prerequisites

Rust, Cargo, and FreeBSD.

Note: This currently only compiles on FreeBSD

Getting Started

Get the code

git clone https://github.com/danlrobertson/capsicum-rs
cd capsicum-rs
cargo build

Writing code using capsicum-rs

Entering capability mode

    use capsicum::{enter, sandboxed};
    use std::fs::File;
    use std::io::Read;

    let mut ok_file = File::open("/tmp/foo").unwrap();
    let mut s = String::new();

    enter().expect("enter failed!");
    assert!(sandboxed(), "application is not sandboxed!");

    match File::create("/tmp/cant_touch_this") {
        Ok(_) => panic!("application is not properly sandboxed!"),
        Err(e) => println!("properly sandboxed: {:?}", e)
    }

    match ok_file.read_to_string(&mut s) {
        Ok(_) => println!("This is okay since we opened the descriptor before sandboxing"),
        Err(_) => panic!("application is not properly sandboxed!")
    }

Limit capability rights to files

    use capsicum::{CapRights, Right, RightsBuilder};
    use std::fs::File;
    use std::io::Read;

    let x = rand::random::<bool>();
    
    let mut ok_file = File::open("/tmp/foo").unwrap();
    let mut s = String::new();
    
    let mut builder = RightsBuilder::new(Right::Seek);
    
    if x {
        builder.add(Right::Read);
    }

    let rights = builder.finalize().unwrap();

    rights.limit(&ok_file).unwrap();
    
    match ok_file.read_to_string(&mut s) {
        Ok(_) if x => println!("Allowed reading: x = {} ", x),
        Err(_) if !x => println!("Did not allow reading: x = {}", x),
        _ => panic!("Not properly sandboxed"),
    }

Dependencies

~0–1.9MB
~37K SLoC