refactor(net): rename child_abi module to materialize

Signed-off-by: Cong Wang <cwang@multikernel.io>

Author: congwang-mk

crates/sandlock-core/src/network/connect.rs

@@ -11,7 +11,7 @@ use crate::seccomp::ctx::SupervisorCtx;
 use crate::seccomp::notif::{read_child_mem, NotifAction};
 use crate::sys::structs::{SeccompNotif, ECONNREFUSED};
 
-use super::child_abi::{
+use super::materialize::{
     named_unix_socket_path, parse_ip_from_sockaddr, parse_port_from_sockaddr,
     set_port_in_sockaddr,
 };

…s/sandlock-core/src/network/child_abi.rs …sandlock-core/src/network/materialize.rscrates/sandlock-core/src/network/child_abi.rs renamed to crates/sandlock-core/src/network/materialize.rs crates/sandlock-core/src/network/child_abi.rs renamed to crates/sandlock-core/src/network/materialize.rs

@@ -4,7 +4,7 @@
 //
 // The module is organized around three phases, each enforced by a boundary:
 //
-//   child_abi    parse phase: every byte-level reader of child-controlled
+//   materialize  parse phase: every byte-level reader of child-controlled
 //                memory; produces owned values (ChildMsghdr, MaterializedMsg)
 //                so later phases never re-read child state (TOCTOU-safe).
 //   verdict      decide phase: pure policy verdicts over materialized values;
@@ -28,8 +28,8 @@ use crate::seccomp::ctx::SupervisorCtx;
 use crate::seccomp::notif::NotifAction;
 use crate::sys::structs::SeccompNotif;
 
-mod child_abi;
 mod connect;
+mod materialize;
 mod rules;
 mod send;
 mod send_engine;

crates/sandlock-core/src/network/mod.rs

@@ -11,7 +11,7 @@ use crate::seccomp::ctx::SupervisorCtx;
 use crate::seccomp::notif::{read_child_mem, NotifAction};
 use crate::sys::structs::{SeccompNotif, ECONNREFUSED};
 
-use super::child_abi::{
+use super::materialize::{
     materialize_msg, mmsg_entry_ptr, mmsg_msglen_addr, named_unix_socket_path,
     parse_ip_from_sockaddr, parse_port_from_sockaddr, ChildMsghdr, MaterializedMsg,
     MAX_SEND_BUF,

crates/sandlock-core/src/network/send.rs

@@ -9,7 +9,7 @@ use std::os::unix::io::{AsRawFd, OwnedFd, RawFd};
 
 use crate::seccomp::notif::{write_child_mem, NotifAction};
 
-use super::child_abi::MaterializedMsg;
+use super::materialize::MaterializedMsg;
 
 /// True iff this send should block until it completes: the socket is in blocking
 /// mode (`O_NONBLOCK` clear — the dup shares the child's file description, so it

crates/sandlock-core/src/network/send_engine.rs

@@ -13,7 +13,7 @@ use crate::seccomp::ctx::SupervisorCtx;
 use crate::seccomp::notif::{read_child_mem, NotifAction};
 use crate::sys::structs::{SeccompNotif, ECONNREFUSED};
 
-use super::child_abi::{
+use super::materialize::{
     materialize_msg, mmsg_entry_ptr, mmsg_msglen_addr, named_unix_socket_path, ChildMsghdr,
     MaterializedMsg,
 };