Protection opt-out: --allow-degraded / --disable per-protection#71

Merged

congwang-mk merged 24 commits into

multikernel:mainfrom

dzerik:follow-up-c-protection-foundation

Jun 5, 2026

Commits on Jun 2, 2026

core: introduce Protection enum with per-variant ABI floor
dzerik
committed
core: add ProtectionState and ProtectionPolicy with Strict default
dzerik
committed
core: add Sandbox::protection_policy field defaulting to strict-all
dzerik
committed
core: add ConfinementError::ProtectionUnavailable variant
dzerik
committed
core: per-protection availability resolution in confine_inner
dzerik
committed
core: mask Degraded fs protections; consolidate net_wildcard computation
dzerik
committed
cli: extend 'sandlock check' with per-protection availability report
dzerik
committed
core: add Sandbox::active_protections() runtime accessor
dzerik
committed
core: SandboxBuilder::allow_degraded and ::disable polarity-out methods
dzerik
committed
ffi: C ABI for Protection + allow_degraded / disable builders
dzerik
committed
python: Sandbox allow_degraded / disable kwargs + Protection IntEnum
dzerik
committed
cli: --allow-degraded and --disable flags for sandlock run
dzerik
committed
docs: document Protection opt-out (allow_degraded / disable)
dzerik
committed
ffi: validate Protection discriminant at the C ABI boundary
dzerik
committed
protection: rename AbstractUnixScope to AbstractUnixSocketScope
dzerik
committed
core: test compute_*_mask security contract; document scope-mask precondition
dzerik
committed
ci: add ubuntu-22.04 to the Rust matrix and log host Landlock ABI
dzerik
committed
ffi: regenerate sandlock.h with Protection symbols via cbindgen
dzerik
committed
core: consolidate Resolved into ProtectionStatus (single resolver)
dzerik
committed
core: serialize protection_policy so checkpoints preserve opt-out
dzerik
committed
cli: canonical protection name, drop never-shipped alias
dzerik
committed
docs: move Protection reference to sandbox-reference.md / python/README.md
dzerik
committed
ci: revert matrix changes (deferred to separate PR)
dzerik
committed

Commits on Jun 3, 2026

core: remove dead ConfinementError::InsufficientAbi variant
dzerik
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Protection opt-out: --allow-degraded / --disable per-protection#71

Protection opt-out: --allow-degraded / --disable per-protection#71
congwang-mk merged 24 commits into
multikernel:mainfrom
dzerik:follow-up-c-protection-foundation

Commits on Jun 2, 2026

core: introduce Protection enum with per-variant ABI floor

core: add ProtectionState and ProtectionPolicy with Strict default

core: add Sandbox::protection_policy field defaulting to strict-all

core: add ConfinementError::ProtectionUnavailable variant

core: per-protection availability resolution in confine_inner

core: mask Degraded fs protections; consolidate net_wildcard computation

cli: extend 'sandlock check' with per-protection availability report

core: add Sandbox::active_protections() runtime accessor

core: SandboxBuilder::allow_degraded and ::disable polarity-out methods

ffi: C ABI for Protection + allow_degraded / disable builders

python: Sandbox allow_degraded / disable kwargs + Protection IntEnum

cli: --allow-degraded and --disable flags for sandlock run

docs: document Protection opt-out (allow_degraded / disable)

ffi: validate Protection discriminant at the C ABI boundary

protection: rename AbstractUnixScope to AbstractUnixSocketScope

core: test compute_*_mask security contract; document scope-mask precondition

ci: add ubuntu-22.04 to the Rust matrix and log host Landlock ABI

ffi: regenerate sandlock.h with Protection symbols via cbindgen

core: consolidate Resolved into ProtectionStatus (single resolver)

core: serialize protection_policy so checkpoints preserve opt-out

cli: canonical protection name, drop never-shipped alias

docs: move Protection reference to sandbox-reference.md / python/README.md

ci: revert matrix changes (deferred to separate PR)

Commits on Jun 3, 2026

core: remove dead ConfinementError::InsufficientAbi variant