platform_build_soong/ui/build/sandbox_config.go

// Copyright 2021 Google Inc. All rights reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package build

type SandboxConfig struct {
	srcDirIsRO        bool
	srcDirRWAllowlist []string
}

func (sc *SandboxConfig) SetSrcDirIsRO(ro bool) {
	sc.srcDirIsRO = ro
}

func (sc *SandboxConfig) SrcDirIsRO() bool {
	return sc.srcDirIsRO
}

// Return the mount flag of the source directory in the nsjail command
func (sc *SandboxConfig) SrcDirMountFlag() string {
	ret := "-B" // Read-write
	if sc.SrcDirIsRO() {
		ret = "-R" // Read-only
	}
	return ret
}

func (sc *SandboxConfig) SetSrcDirRWAllowlist(allowlist []string) {
	sc.srcDirRWAllowlist = allowlist
}

func (sc *SandboxConfig) SrcDirRWAllowlist() []string {
	return sc.srcDirRWAllowlist
}