Functions — github.com/RaunakChhatwal/fhsenv

CodeHub MCPcopy Create free account

hub / github.com/RaunakChhatwal/fhsenv / functions

Functions18 in github.com/RaunakChhatwal/fhsenv

⨍ Functions 18 ◇ Types & classes 3

↓ 5 callersFunctionprepend_entries_in_env

(key: &str, additions: &[&str])

src/prepare_env.rs:23

↓ 4 callersFunctionbind_entries

asynchronously loop over bind_entry

src/main.rs:216

↓ 3 callersFunctioncommand

(program: &Path)

↓ 3 callersFunctionsubprocess

(program: &Path, args: I)

↓ 2 callersFunctionset_mapping

https://man7.org/linux/man-pages/man1/newuidmap.1.html

src/main.rs:116

↓ 1 callersFunctionbind_entry

target is inside new_root so isolated from outside however entry may be malicious if from fhs_path or /tmp TODO: is there a practical limit on number

src/main.rs:194

↓ 1 callersFunctioncreate_ld_so_conf

(new_root: &std::path::Path)

src/prepare_env.rs:3

↓ 1 callersFunctioncreate_new_root

mount requires root since it allows the caller to overwrite sensitive system files > mount a filesystem of your choice on /etc, with an /etc/shadow co

src/main.rs:242

↓ 1 callersFunctiondefine_fhs

(Mode { shell_nix, packages }: Mode)

src/main.rs:289

↓ 1 callersFunctionenter_shell

TODO: how does nix-shell do this?

src/main.rs:313

↓ 1 callersFunctionenter_user_namespace

https://man7.org/linux/man-pages/man7/user_namespaces.7.html

src/main.rs:154

↓ 1 callersFunctionexists

tokio::fs::try_exists equivalent that doesn't traverse symlinks

src/main.rs:183

↓ 1 callersFunctionget_fhs_path

TODO: handle the case where fhs_derivation doesn't actually evaluate to buildFHSUserEnv.env

↓ 1 callersMethodmapper

↓ 1 callersFunctionpivot_root

(new_root: &Path)

src/main.rs:265

↓ 1 callersFunctionprepare_env

src/prepare_env.rs:31

↓ 1 callersFunctionread_subuid

(mapping: Mapping, username: &str)

src/main.rs:348