Skip to content
Critiq Docs

Search docs

Search documentation pages and rules

security.network

Avoid binding Rust services to all interfaces

Rust network services should avoid explicit binds to `0.0.0.0`, `::`, or `[::]` unless public exposure is intentional and controlled.

#Metadata

Rule ID
rust.security.bind-all-interfaces
Severity
medium
Confidence
0.85
Languages
rust
Presets
security, strict
Stability
experimental
Applies to
block
Tags
exposure, network, rules-catalog, rust, security

#Why it matters

Binding every interface can unintentionally expose internal services beyond expected trust boundaries.

#Remediation

Prefer loopback or an explicit interface bind unless broad exposure is required and defended by network controls.

#Repository path

The generated metadata points to critiq-rules/libs/rules/catalog/rules/rust/rust.security.bind-all-interfaces.rule.yaml.