mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
bb0ca29753
Borrowed from rego-cpp Significantly (> 10 times) faster execution. $ cargo test -r --test aci aci/mount_device passed 9.597958ms aci/mount_overlay passed 10.159208ms aci/scratch_mount passed 8.598875ms aci/create_container passed 10.237292ms aci/shutdown_container passed 6.904084ms aci/scratch_unmount passed 6.530875ms aci/unmount_overlay passed 5.958875ms aci/unmount_device passed 5.657834ms aci/load_fragment passed 6.049917ms Signed-off-by: Anand Krishnamoorthi <anakrish@microsoft.com>
27 lines
1.8 KiB
Rego
27 lines
1.8 KiB
Rego
# Copyright (c) Microsoft Corporation.
|
|
# Licensed under the MIT License.
|
|
|
|
package api
|
|
|
|
version := "0.10.0"
|
|
|
|
enforcement_points := {
|
|
"mount_device": {"introducedVersion": "0.1.0", "default_results": {"allowed": false}},
|
|
"mount_overlay": {"introducedVersion": "0.1.0", "default_results": {"allowed": false}},
|
|
"create_container": {"introducedVersion": "0.1.0", "default_results": {"allowed": false, "env_list": null, "allow_stdio_access": false}},
|
|
"unmount_device": {"introducedVersion": "0.2.0", "default_results": {"allowed": true}},
|
|
"unmount_overlay": {"introducedVersion": "0.6.0", "default_results": {"allowed": true}},
|
|
"exec_in_container": {"introducedVersion": "0.2.0", "default_results": {"allowed": true, "env_list": null}},
|
|
"exec_external": {"introducedVersion": "0.3.0", "default_results": {"allowed": true, "env_list": null, "allow_stdio_access": false}},
|
|
"shutdown_container": {"introducedVersion": "0.4.0", "default_results": {"allowed": true}},
|
|
"signal_container_process": {"introducedVersion": "0.5.0", "default_results": {"allowed": true}},
|
|
"plan9_mount": {"introducedVersion": "0.6.0", "default_results": {"allowed": true}},
|
|
"plan9_unmount": {"introducedVersion": "0.6.0", "default_results": {"allowed": true}},
|
|
"get_properties": {"introducedVersion": "0.7.0", "default_results": {"allowed": true}},
|
|
"dump_stacks": {"introducedVersion": "0.7.0", "default_results": {"allowed": true}},
|
|
"runtime_logging": {"introducedVersion": "0.8.0", "default_results": {"allowed": true}},
|
|
"load_fragment": {"introducedVersion": "0.9.0", "default_results": {"allowed": false, "add_module": false}},
|
|
"scratch_mount": {"introducedVersion": "0.10.0", "default_results": {"allowed": true}},
|
|
"scratch_unmount": {"introducedVersion": "0.10.0", "default_results": {"allowed": true}},
|
|
}
|