Enum CommonCap2Permission

pub enum CommonCap2Permission {
    AuditRead,
    BlockSuspend,
    Bpf,
    MacAdmin,
    MacOverride,
    Syslog,
    WakeAlarm,
}

Permissions common to all cap2-like object classes (e.g. “capability2” for now and “cap2_userns” after Starnix gains user namespacing support). These are combined with a specific Capability2Class by policy enforcement hooks, to obtain class-affine permission values to check.

Variants

AuditRead

BlockSuspend

Bpf

MacAdmin

MacOverride

Syslog

WakeAlarm

Implementations

impl CommonCap2Permission

pub fn all_variants() -> Vec<Self>

impl CommonCap2Permission

pub fn for_class(&self, class: Cap2Class) -> KernelPermission

Returns the class-affine KernelPermission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “mac_admin” permission access based on the “allow” rules for the correct target object class.

Trait Implementations

impl Clone for CommonCap2Permission

fn clone(&self) -> CommonCap2Permission

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommonCap2Permission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for CommonCap2Permission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CommonCap2Permission

fn eq(&self, other: &CommonCap2Permission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CommonCap2Permission

impl StructuralPartialEq for CommonCap2Permission