Class ProcessContainerPermissions

Namespace

Utils.Reflection.ProcessIsolation

Assembly

Utils.Reflection.dll

Represents coarse-grained permissions for child processes started through a process container. Instances are immutable after construction (init-only properties): use an object initializer to customize a permission set, or Default for the restrictive baseline.

public sealed class ProcessContainerPermissions

Inheritance

object

ProcessContainerPermissions

Inherited Members

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.ReferenceEquals(object, object)

object.ToString()

Extension Methods

DataUtils.ToDbValue(object?)

MathEx.Clamp<T>(T, T, T, IComparer<T>)

FluentExtensions.Failure<T>(T)

FluentExtensions.IsEqualTo<T, CT>(T, CT)

FluentExtensions.IsGreaterOrEqualsThan<T, CT>(T, CT)

FluentExtensions.IsGreaterThan<T, CT>(T, CT)

FluentExtensions.IsIn<T>(T, params T[])

FluentExtensions.IsLowerOrEqualsThan<T, CT>(T, CT)

FluentExtensions.IsLowerThan<T, CT>(T, CT)

FluentExtensions.IsNotIn<T>(T, params T[])

FluentExtensions.IsNotNull<T>(T)

FluentExtensions.IsNull<T>(T)

FluentExtensions.Success<T>(T)

FluentExtensions.Test<T>(T, Func<T, bool>)

ObjectUtils.Between<T>(T, IComparer<T>, T, T)

ObjectUtils.Between<T>(T, IComparer<T>, T, T, bool, bool)

ObjectUtils.DoAsync<T, Result>(T, Func<T, Task<Result>>, Func<Task<Result>>)

ObjectUtils.DoAsync<T, Result>(T, Func<T, Task<Result>>, Result)

ObjectUtils.DoAsync<T, Result>(T, Func<T, Result>, Func<Result>)

ObjectUtils.DoAsync<T, Result>(T, Func<T, Result>, Result)

ObjectUtils.Do<T, Result>(T, Func<T, Result>, Func<Result>)

ObjectUtils.Do<T, Result>(T, Func<T, Result>, Result)

ObjectUtils.In<T>(T, params T[])

ObjectUtils.NotIn<T>(T, params T[])

Validations.ArgMustBe<T>(T, Func<T, bool>, string, string)

Validations.ArgMustNotBe<T>(T, Func<T, bool>, string, string)

Validations.Arg<T>(T, string)

Validations.ValueMustNotBeNull<T>(T, string)

Validations.Variable<T>(T, string)

Properties

AllowDeviceAccess

Gets whether access to host devices is allowed.

public bool AllowDeviceAccess { get; init; }

Property Value

bool

AllowDiskRead

Gets whether read access to files is allowed. This must remain enabled for managed executables and dependencies to load.

public bool AllowDiskRead { get; init; }

Property Value

bool

AllowDiskWrite

Gets whether write access to files is allowed.

public bool AllowDiskWrite { get; init; }

Property Value

bool

AllowNetwork

Gets whether outbound/inbound network access is allowed.

public bool AllowNetwork { get; init; }

Property Value

bool

AllowProcessDebugging

Gets whether process debugging / inspection capabilities are allowed.

public bool AllowProcessDebugging { get; init; }

Property Value

bool

Default

Gets a fresh instance of the default (most restrictive) permission set used for plugin worker isolation. Each access returns a new, independent instance, so callers cannot mutate a shared baseline and silently weaken isolation for other consumers.

public static ProcessContainerPermissions Default { get; }

Property Value

ProcessContainerPermissions