crates/heimdall-broker/Cargo.toml
[package]
name = "nordisk-heimdall-broker"
description = "Heimdall is a defensive sandbox: heimdall-broker is the syscall broker (layer 2), a seccomp USER_NOTIF supervisor that checks a worker's openat/socket/connect/bind/execve against the job policy, opens the file or socket itself and injects the fd with SECCOMP_IOCTL_NOTIF_ADDFD."
version = "0.3.2"
edition.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
readme.workspace = true
rust-version.workspace = true
keywords = ["sandbox","seccomp","security","broker","linux"]
categories = ["os::linux-apis"]
[package.metadata.docs.rs]
targets = ["x86_64-unknown-linux-gnu"]
[lib]
name = "heimdall_broker"
path = "src/lib.rs"
# The broker's own self-test worker: the kernel tests (tests/kernel.rs) run it
# under the broker; `heimdall-broker-selftest probe` prints what this kernel
# gives the broker.
[[bin]]
name = "heimdall-broker-selftest"
path = "src/bin/heimdall-broker-selftest.rs"
test = false
doc = false
[dependencies]
heimdall-core = { package = "nordisk-heimdall-core", path = "../heimdall-core", version = "0.3.0" }
heimdall-seccomp = { package = "nordisk-heimdall-seccomp", path = "../heimdall-seccomp", version = "0.3.2" }
libc = "0.2"
serde = { version = "1", features = ["derive"] }
thiserror = "2"
[dev-dependencies]
proptest = "1"
serde_json = "1"