Enum KernelPermission 

pub enum KernelPermission {
    AnonFsNode(AnonFsNodePermission),
    Binder(BinderPermission),
    Block(BlockFilePermission),
    Bpf(BpfPermission),
    Capability(CapabilityPermission),
    Capability2(Capability2Permission),
    Character(CharacterFilePermission),
    Dir(DirPermission),
    Fd(FdPermission),
    Fifo(FifoFilePermission),
    File(FilePermission),
    FileSystem(FileSystemPermission),
    KeySocket(KeySocketPermission),
    Link(LinkFilePermission),
    MemFdFile(MemFdFilePermission),
    NetlinkAuditSocket(NetlinkAuditSocketPermission),
    NetlinkConnectorSocket(NetlinkConnectorSocketPermission),
    NetlinkCryptoSocket(NetlinkCryptoSocketPermission),
    NetlinkDnrtSocket(NetlinkDnrtSocketPermission),
    NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission),
    NetlinkFirewallSocket(NetlinkFirewallSocketPermission),
    NetlinkGenericSocket(NetlinkGenericSocketPermission),
    NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission),
    NetlinkIscsiSocket(NetlinkIscsiSocketPermission),
    NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission),
    NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission),
    NetlinkNflogSocket(NetlinkNflogSocketPermission),
    NetlinkRdmaSocket(NetlinkRdmaSocketPermission),
    NetlinkRouteSocket(NetlinkRouteSocketPermission),
    NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission),
    NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission),
    NetlinkSocket(NetlinkSocketPermission),
    NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission),
    NetlinkXfrmSocket(NetlinkXfrmSocketPermission),
    PacketSocket(PacketSocketPermission),
    PerfEvent(PerfEventPermission),
    Process(ProcessPermission),
    Process2(Process2Permission),
    QipcrtrSocket(QipcrtrSocketPermission),
    RawIpSocket(RawIpSocketPermission),
    Security(SecurityPermission),
    SockFile(SockFilePermission),
    Socket(SocketPermission),
    System(SystemPermission),
    TcpSocket(TcpSocketPermission),
    TunSocket(TunSocketPermission),
    UdpSocket(UdpSocketPermission),
    UnixDgramSocket(UnixDgramSocketPermission),
    UnixStreamSocket(UnixStreamSocketPermission),
    VSockSocket(VsockSocketPermission),
}

A well-known (class, permission) pair in SELinux policy that has a particular meaning in policy enforcement hooks.

Variants

AnonFsNode(AnonFsNodePermission)

Permissions for the well-known SELinux “anon_inode” file-like object class.

Binder(BinderPermission)

Permissions for the well-known SELinux “binder” file-like object class.

Block(BlockFilePermission)

Permissions for the well-known SELinux “blk_file” file-like object class.

Bpf(BpfPermission)

Permissions for the well-known SELinux “bpf” file-like object class.

Capability(CapabilityPermission)

Permissions for the well-known SELinux “capability” object class.

Capability2(Capability2Permission)

Permissions for the well-known SELinux “capability2” object class.

Character(CharacterFilePermission)

Permissions for the well-known SELinux “chr_file” file-like object class.

Dir(DirPermission)

Permissions for the well-known SELinux “dir” file-like object class.

Fd(FdPermission)

Permissions for the well-known SELinux “fd” object class.

Fifo(FifoFilePermission)

Permissions for the well-known SELinux “fifo_file” file-like object class.

File(FilePermission)

Permissions for the well-known SELinux “file” object class.

FileSystem(FileSystemPermission)

Permissions for the well-known SELinux “filesystem” object class.

KeySocket(KeySocketPermission)

Permissions for the well-known SELinux “packet_socket” object class.

Link(LinkFilePermission)

Permissions for the well-known SELinux “lnk_file” file-like object class.

MemFdFile(MemFdFilePermission)

Permissions for the well-known SELinux “memfd_file” file-like object class.

NetlinkAuditSocket(NetlinkAuditSocketPermission)

Permissions for the well-known SELinux “netlink_audit_socket” file-like object class.

NetlinkConnectorSocket(NetlinkConnectorSocketPermission)

Permissions for the well-known SELinux “netlink_connector_socket” file-like object class.

NetlinkCryptoSocket(NetlinkCryptoSocketPermission)

Permissions for the well-known SELinux “netlink_crypto_socket” file-like object class.

NetlinkDnrtSocket(NetlinkDnrtSocketPermission)

Permissions for the well-known SELinux “netlink_dnrt_socket” file-like object class.

NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission)

Permissions for the well-known SELinux “netlink_fib_lookup_socket” file-like object class.

NetlinkFirewallSocket(NetlinkFirewallSocketPermission)

Permissions for the well-known SELinux “netlink_firewall_socket” file-like object class.

NetlinkGenericSocket(NetlinkGenericSocketPermission)

Permissions for the well-known SELinux “netlink_generic_socket” file-like object class.

NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission)

Permissions for the well-known SELinux “netlink_ip6fw_socket” file-like object class.

NetlinkIscsiSocket(NetlinkIscsiSocketPermission)

Permissions for the well-known SELinux “netlink_iscsi_socket” file-like object class.

NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission)

Permissions for the well-known SELinux “netlink_kobject_uevent_socket” file-like object class.

NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission)

Permissions for the well-known SELinux “netlink_netfilter_socket” file-like object class.

NetlinkNflogSocket(NetlinkNflogSocketPermission)

Permissions for the well-known SELinux “netlink_nflog_socket” file-like object class.

NetlinkRdmaSocket(NetlinkRdmaSocketPermission)

Permissions for the well-known SELinux “netlink_rdma_socket” file-like object class.

NetlinkRouteSocket(NetlinkRouteSocketPermission)

Permissions for the well-known SELinux “netlink_route_socket” file-like object class.

NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission)

Permissions for the well-known SELinux “netlink_scsitransport_socket” file-like object class.

NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission)

Permissions for the well-known SELinux “netlink_selinux_socket” file-like object class.

NetlinkSocket(NetlinkSocketPermission)

Permissions for the well-known SELinux “netlink_socket” file-like object class.

NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission)

Permissions for the well-known SELinux “netlink_tcpdiag_socket” file-like object class.

NetlinkXfrmSocket(NetlinkXfrmSocketPermission)

Permissions for the well-known SELinux “netlink_xfrm_socket” file-like object class.

PacketSocket(PacketSocketPermission)

Permissions for the well-known SELinux “packet_socket” object class.

PerfEvent(PerfEventPermission)

Permissions for the well-known SELinux “perf_event” object class.

Process(ProcessPermission)

Permissions for the well-known SELinux “process” object class.

Process2(Process2Permission)

Permissions for the well-known SELinux “process2” object class.

QipcrtrSocket(QipcrtrSocketPermission)

Permissions for the well-known SELinux “qipcrtr_socket” object class.

RawIpSocket(RawIpSocketPermission)

Permissions for the well-known SELinux “rawip_socket” object class.

Security(SecurityPermission)

Permissions for access to parts of the “selinuxfs” used to administer and query SELinux.

SockFile(SockFilePermission)

Permissions for the well-known SELinux “sock_file” file-like object class.

Socket(SocketPermission)

Permissions for the well-known SELinux “socket” object class.

System(SystemPermission)

Permissions for the well-known SELinux “system” object class.

TcpSocket(TcpSocketPermission)

Permissions for the well-known SELinux “tcp_socket” object class.

TunSocket(TunSocketPermission)

Permissions for the well-known SELinux “tun_socket” object class.

UdpSocket(UdpSocketPermission)

Permissions for the well-known SELinux “udp_socket” object class.

UnixDgramSocket(UnixDgramSocketPermission)

Permissions for the well-known SELinux “unix_dgram_socket” object class.

UnixStreamSocket(UnixStreamSocketPermission)

Permissions for the well-known SELinux “unix_stream_socket” object class.

VSockSocket(VsockSocketPermission)

Permissions for the well-known SELinux “vsock_socket” object class.

Implementations

impl KernelPermission

pub fn name(&self) -> &'static str

pub fn all_variants() -> impl Iterator<Item = Self>

Trait Implementations

impl ClassPermission for KernelPermission

fn class(&self) -> KernelClass

impl Clone for KernelPermission

fn clone(&self) -> KernelPermission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for KernelPermission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<T: Into<KernelClass>> ForClass<T> for KernelPermission

fn for_class(&self, class: T) -> KernelPermission

Returns the class-affine KernelPermission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “sys_nice” permission access based on the “allow” rules for the correct target object class.

impl From<AnonFsNodePermission> for KernelPermission

fn from(v: AnonFsNodePermission) -> Self

Converts to this type from the input type.

impl From<BinderPermission> for KernelPermission

fn from(v: BinderPermission) -> Self

Converts to this type from the input type.

impl From<BlockFilePermission> for KernelPermission

fn from(v: BlockFilePermission) -> Self

Converts to this type from the input type.

impl From<BpfPermission> for KernelPermission

fn from(v: BpfPermission) -> Self

Converts to this type from the input type.

impl From<Capability2Permission> for KernelPermission

fn from(v: Capability2Permission) -> Self

Converts to this type from the input type.

impl From<CapabilityPermission> for KernelPermission

fn from(v: CapabilityPermission) -> Self

Converts to this type from the input type.

impl From<CharacterFilePermission> for KernelPermission

fn from(v: CharacterFilePermission) -> Self

Converts to this type from the input type.

impl From<DirPermission> for KernelPermission

fn from(v: DirPermission) -> Self

Converts to this type from the input type.

impl From<FdPermission> for KernelPermission

fn from(v: FdPermission) -> Self

Converts to this type from the input type.

impl From<FifoFilePermission> for KernelPermission

fn from(v: FifoFilePermission) -> Self

Converts to this type from the input type.

impl From<FilePermission> for KernelPermission

fn from(v: FilePermission) -> Self

Converts to this type from the input type.

impl From<FileSystemPermission> for KernelPermission

fn from(v: FileSystemPermission) -> Self

Converts to this type from the input type.

impl From<KeySocketPermission> for KernelPermission

fn from(v: KeySocketPermission) -> Self

Converts to this type from the input type.

impl From<LinkFilePermission> for KernelPermission

fn from(v: LinkFilePermission) -> Self

Converts to this type from the input type.

impl From<MemFdFilePermission> for KernelPermission

fn from(v: MemFdFilePermission) -> Self

Converts to this type from the input type.

impl From<NetlinkAuditSocketPermission> for KernelPermission

fn from(v: NetlinkAuditSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkConnectorSocketPermission> for KernelPermission

fn from(v: NetlinkConnectorSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkCryptoSocketPermission> for KernelPermission

fn from(v: NetlinkCryptoSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkDnrtSocketPermission> for KernelPermission

fn from(v: NetlinkDnrtSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkFibLookupSocketPermission> for KernelPermission

fn from(v: NetlinkFibLookupSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkFirewallSocketPermission> for KernelPermission

fn from(v: NetlinkFirewallSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkGenericSocketPermission> for KernelPermission

fn from(v: NetlinkGenericSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkIp6FwSocketPermission> for KernelPermission

fn from(v: NetlinkIp6FwSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkIscsiSocketPermission> for KernelPermission

fn from(v: NetlinkIscsiSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkKobjectUeventSocketPermission> for KernelPermission

fn from(v: NetlinkKobjectUeventSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkNetfilterSocketPermission> for KernelPermission

fn from(v: NetlinkNetfilterSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkNflogSocketPermission> for KernelPermission

fn from(v: NetlinkNflogSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkRdmaSocketPermission> for KernelPermission

fn from(v: NetlinkRdmaSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkRouteSocketPermission> for KernelPermission

fn from(v: NetlinkRouteSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkScsitransportSocketPermission> for KernelPermission

fn from(v: NetlinkScsitransportSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkSelinuxSocketPermission> for KernelPermission

fn from(v: NetlinkSelinuxSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkSocketPermission> for KernelPermission

fn from(v: NetlinkSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkTcpDiagSocketPermission> for KernelPermission

fn from(v: NetlinkTcpDiagSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkXfrmSocketPermission> for KernelPermission

fn from(v: NetlinkXfrmSocketPermission) -> Self

Converts to this type from the input type.

impl From<PacketSocketPermission> for KernelPermission

fn from(v: PacketSocketPermission) -> Self

Converts to this type from the input type.

impl From<PerfEventPermission> for KernelPermission

fn from(v: PerfEventPermission) -> Self

Converts to this type from the input type.

impl From<Process2Permission> for KernelPermission

fn from(v: Process2Permission) -> Self

Converts to this type from the input type.

impl From<ProcessPermission> for KernelPermission

fn from(v: ProcessPermission) -> Self

Converts to this type from the input type.

impl From<QipcrtrSocketPermission> for KernelPermission

fn from(v: QipcrtrSocketPermission) -> Self

Converts to this type from the input type.

impl From<RawIpSocketPermission> for KernelPermission

fn from(v: RawIpSocketPermission) -> Self

Converts to this type from the input type.

impl From<SecurityPermission> for KernelPermission

fn from(v: SecurityPermission) -> Self

Converts to this type from the input type.

impl From<SockFilePermission> for KernelPermission

fn from(v: SockFilePermission) -> Self

Converts to this type from the input type.

impl From<SocketPermission> for KernelPermission

fn from(v: SocketPermission) -> Self

Converts to this type from the input type.

impl From<SystemPermission> for KernelPermission

fn from(v: SystemPermission) -> Self

Converts to this type from the input type.

impl From<TcpSocketPermission> for KernelPermission

fn from(v: TcpSocketPermission) -> Self

Converts to this type from the input type.

impl From<TunSocketPermission> for KernelPermission

fn from(v: TunSocketPermission) -> Self

Converts to this type from the input type.

impl From<UdpSocketPermission> for KernelPermission

fn from(v: UdpSocketPermission) -> Self

Converts to this type from the input type.

impl From<UnixDgramSocketPermission> for KernelPermission

fn from(v: UnixDgramSocketPermission) -> Self

Converts to this type from the input type.

impl From<UnixStreamSocketPermission> for KernelPermission

fn from(v: UnixStreamSocketPermission) -> Self

Converts to this type from the input type.

impl From<VsockSocketPermission> for KernelPermission

fn from(v: VsockSocketPermission) -> Self

Converts to this type from the input type.

impl Hash for KernelPermission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for KernelPermission

fn eq(&self, other: &KernelPermission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for KernelPermission

impl StructuralPartialEq for KernelPermission