profiles/Cargo.toml
[package]
name = "nordisk-heimdall-profiles"
description = "Heimdall is a defensive sandbox: the generated, checked-in seccomp profiles (profiles/<workload>/<arch>-<libc>.rs and their OCI seccomp JSON), compiled into the runners that enforce them."
version.workspace = true
edition.workspace = true
license.workspace = true
repository.workspace = true
homepage.workspace = true
readme.workspace = true
rust-version.workspace = true
keywords = ["sandbox","seccomp","security","linux"]
categories = ["os::linux-apis"]
# Published from 0.3.0 (heimdall-container and heimdall-cli enforce these
# profiles at runtime). Only the generated tables go into the package: the
# probe corpus (guests, inputs, probe.json) stays in the repository.
include = ["src/**", "*/*.rs", "*/*.json", "*/workload.toml"]
[package.metadata.docs.rs]
targets = ["x86_64-unknown-linux-gnu"]
[lib]
name = "heimdall_profiles"
path = "src/lib.rs"
[dependencies]
heimdall-seccomp = { package = "nordisk-heimdall-seccomp", path = "../crates/heimdall-seccomp", version = "0.3.0" }
[dev-dependencies]
heimdall-probe = { package = "nordisk-heimdall-probe", path = "../crates/heimdall-probe", version = "0.3.0" }
libc = "0.2"
# Enforces every checked-in profile on its real binary over its corpus.
# Skipped unless HEIMDALL_KERNEL_TESTS=1 (scripts/seccomp-tests.sh).
[[test]]
name = "enforce"
harness = false