Function apply

crates/openshell-supervisor-process/src/sandbox/linux/mod.rs:53–57

Retained for backward compat; live callers use prepare+enforce.

(policy: &SandboxPolicy, workdir: Option<&str>)

/// New callers should use [`prepare`] + [`enforce`] for correct privilege ordering.
#[allow(dead_code)] // Retained for backward compat; live callers use prepare+enforce.
pub fn apply(policy: &SandboxPolicy, workdir: Option<&str>) -> Result<()> {
    landlock::apply(policy, workdir)?;
    seccomp::apply(policy)?;
    Ok(())
}

/// Probe Landlock availability and emit OCSF logs from the parent process.
///