Table of Contents

Class SandboxPolicy

Namespace
Openshell.Sandbox.V1
Assembly
OpenShell.Sdk.dll

Sandbox security policy configuration.

public sealed class SandboxPolicy : IMessage<SandboxPolicy>, IEquatable<SandboxPolicy>, IDeepCloneable<SandboxPolicy>, IBufferMessage, IMessage
Inheritance
SandboxPolicy
Implements
IMessage<SandboxPolicy>
IDeepCloneable<SandboxPolicy>
IBufferMessage
IMessage
Inherited Members

Constructors

SandboxPolicy()

public SandboxPolicy()

SandboxPolicy(SandboxPolicy)

public SandboxPolicy(SandboxPolicy other)

Parameters

other SandboxPolicy

Fields

FilesystemFieldNumber

Field number for the "filesystem" field.

public const int FilesystemFieldNumber = 2

Field Value

int

LandlockFieldNumber

Field number for the "landlock" field.

public const int LandlockFieldNumber = 3

Field Value

int

NetworkMiddlewaresFieldNumber

Field number for the "network_middlewares" field.

public const int NetworkMiddlewaresFieldNumber = 6

Field Value

int

NetworkPoliciesFieldNumber

Field number for the "network_policies" field.

public const int NetworkPoliciesFieldNumber = 5

Field Value

int

ProcessFieldNumber

Field number for the "process" field.

public const int ProcessFieldNumber = 4

Field Value

int

VersionFieldNumber

Field number for the "version" field.

public const int VersionFieldNumber = 1

Field Value

int

Properties

Descriptor

public static MessageDescriptor Descriptor { get; }

Property Value

MessageDescriptor

Filesystem

Filesystem access policy.

public FilesystemPolicy Filesystem { get; set; }

Property Value

FilesystemPolicy

Landlock

Landlock configuration.

public LandlockPolicy Landlock { get; set; }

Property Value

LandlockPolicy

NetworkMiddlewares

Reusable supervisor middleware configs for network egress, keyed by their policy-local names. At most 10 configs are accepted, and at most 10 stages can be selected per request.

public MapField<string, NetworkMiddlewareConfig> NetworkMiddlewares { get; }

Property Value

MapField<string, NetworkMiddlewareConfig>

NetworkPolicies

Network access policies keyed by name (e.g. "claude_code", "gitlab").

public MapField<string, NetworkPolicyRule> NetworkPolicies { get; }

Property Value

MapField<string, NetworkPolicyRule>

Parser

public static MessageParser<SandboxPolicy> Parser { get; }

Property Value

MessageParser<SandboxPolicy>

Process

Process execution policy.

public ProcessPolicy Process { get; set; }

Property Value

ProcessPolicy

Version

Policy version.

public uint Version { get; set; }

Property Value

uint

Methods

CalculateSize()

Calculates the size of this message in Protocol Buffer wire format, in bytes.

public int CalculateSize()

Returns

int

The number of bytes required to write this message to a coded output stream.

Clone()

Creates a deep clone of this object.

public SandboxPolicy Clone()

Returns

SandboxPolicy

A deep clone of this object.

Equals(SandboxPolicy)

Indicates whether the current object is equal to another object of the same type.

public bool Equals(SandboxPolicy other)

Parameters

other SandboxPolicy

An object to compare with this object.

Returns

bool

true if the current object is equal to the other parameter; otherwise, false.

Equals(object)

Determines whether the specified object is equal to the current object.

public override bool Equals(object other)

Parameters

other object

Returns

bool

true if the specified object is equal to the current object; otherwise, false.

GetHashCode()

Serves as the default hash function.

public override int GetHashCode()

Returns

int

A hash code for the current object.

MergeFrom(CodedInputStream)

Merges the data from the specified coded input stream with the current message.

public void MergeFrom(CodedInputStream input)

Parameters

input CodedInputStream

Remarks

See the user guide for precise merge semantics.

MergeFrom(SandboxPolicy)

Merges the given message into this one.

public void MergeFrom(SandboxPolicy other)

Parameters

other SandboxPolicy

Remarks

See the user guide for precise merge semantics.

ToString()

Returns a string that represents the current object.

public override string ToString()

Returns

string

A string that represents the current object.

WriteTo(CodedOutputStream)

Writes the data to the given coded output stream.

public void WriteTo(CodedOutputStream output)

Parameters

output CodedOutputStream

Coded output stream to write the data to. Must not be null.