Enum CommonFsNodePermission 

pub enum CommonFsNodePermission {
    Append,
    AuditAccess,
    Create,
    GetAttr,
    Ioctl,
    Lock,
    Map,
    Read,
    RelabelFrom,
    RelabelTo,
    SetAttr,
    Write,
}

Permissions meaningful for all [crate::vfs::FsNode]s, whether file- or socket-like.

This extra layer of common permissions is not reflected in the hierarchy defined by the SELinux Reference Policy. Because even common permissions are mapped per-class, by name, to the policy equivalents, the implementation and policy notions of common permissions need not be identical.

Variants

Append

Permission to append to a file or socket.

AuditAccess

Pseudo-permission used in dontaudit access-rules to allow access checks to be made between specific sources & targets without generating audit logs.

Create

Permission to create a file or socket.

GetAttr

Permission to query attributes, including uid, gid and extended attributes.

Ioctl

Permission to execute ioctls on the file or socket.

Lock

Permission to set and unset file or socket locks.

Map

Permission to map a file.

Read

Permission to read content from a file or socket, as well as reading or following links.

RelabelFrom

Permission checked against the existing label when updating a node’s security label.

RelabelTo

Permission checked against the new label when updating a node’s security label.

SetAttr

Permission to modify attributes, including uid, gid and extended attributes.

Write

Permission to write contents to the file or socket.

Implementations

impl CommonFsNodePermission

pub fn all_variants() -> impl Iterator<Item = Self>

Trait Implementations

impl Clone for CommonFsNodePermission

fn clone(&self) -> CommonFsNodePermission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommonFsNodePermission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T: Into<FsNodeClass>> ForClass<T> for CommonFsNodePermission

fn for_class(&self, class: T) -> KernelPermission

Returns the class-affine KernelPermission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “read” permission access based on the “allow” rules for the correct target object class.

impl Hash for CommonFsNodePermission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CommonFsNodePermission

fn eq(&self, other: &CommonFsNodePermission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CommonFsNodePermission

impl StructuralPartialEq for CommonFsNodePermission