KernelPermission

Enum KernelPermission 

Source
pub enum KernelPermission {
Show 46 variants AnonFsNode(AnonFsNodePermission), Binder(BinderPermission), Block(BlockFilePermission), Bpf(BpfPermission), Capability(CapabilityPermission), Capability2(Capability2Permission), Character(CharacterFilePermission), Dir(DirPermission), Fd(FdPermission), Fifo(FifoFilePermission), File(FilePermission), FileSystem(FileSystemPermission), KeySocket(KeySocketPermission), Link(LinkFilePermission), NetlinkAuditSocket(NetlinkAuditSocketPermission), NetlinkConnectorSocket(NetlinkConnectorSocketPermission), NetlinkCryptoSocket(NetlinkCryptoSocketPermission), NetlinkDnrtSocket(NetlinkDnrtSocketPermission), NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission), NetlinkFirewallSocket(NetlinkFirewallSocketPermission), NetlinkGenericSocket(NetlinkGenericSocketPermission), NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission), NetlinkIscsiSocket(NetlinkIscsiSocketPermission), NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission), NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission), NetlinkNflogSocket(NetlinkNflogSocketPermission), NetlinkRdmaSocket(NetlinkRdmaSocketPermission), NetlinkRouteSocket(NetlinkRouteSocketPermission), NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission), NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission), NetlinkSocket(NetlinkSocketPermission), NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission), NetlinkXfrmSocket(NetlinkXfrmSocketPermission), PacketSocket(PacketSocketPermission), PerfEvent(PerfEventPermission), Process(ProcessPermission), RawIpSocket(RawIpSocketPermission), Security(SecurityPermission), SockFile(SockFilePermission), Socket(SocketPermission), System(SystemPermission), TcpSocket(TcpSocketPermission), UdpSocket(UdpSocketPermission), UnixDgramSocket(UnixDgramSocketPermission), UnixStreamSocket(UnixStreamSocketPermission), VSockSocket(VsockSocketPermission),
}
Expand description

A well-known (class, permission) pair in SELinux policy that has a particular meaning in policy enforcement hooks.

Variants§

§

AnonFsNode(AnonFsNodePermission)

Permissions for the well-known SELinux “anon_inode” file-like object class.

§

Binder(BinderPermission)

Permissions for the well-known SELinux “binder” file-like object class.

§

Block(BlockFilePermission)

Permissions for the well-known SELinux “blk_file” file-like object class.

§

Bpf(BpfPermission)

Permissions for the well-known SELinux “bpf” file-like object class.

§

Capability(CapabilityPermission)

Permissions for the well-known SELinux “capability” object class.

§

Capability2(Capability2Permission)

Permissions for the well-known SELinux “capability2” object class.

§

Character(CharacterFilePermission)

Permissions for the well-known SELinux “chr_file” file-like object class.

§

Dir(DirPermission)

Permissions for the well-known SELinux “dir” file-like object class.

§

Fd(FdPermission)

Permissions for the well-known SELinux “fd” object class.

§

Fifo(FifoFilePermission)

Permissions for the well-known SELinux “fifo_file” file-like object class.

§

File(FilePermission)

Permissions for the well-known SELinux “file” object class.

§

FileSystem(FileSystemPermission)

Permissions for the well-known SELinux “filesystem” object class.

§

KeySocket(KeySocketPermission)

Permissions for the well-known SELinux “packet_socket” object class.

Permissions for the well-known SELinux “lnk_file” file-like object class.

§

NetlinkAuditSocket(NetlinkAuditSocketPermission)

Permissions for the well-known SELinux “netlink_audit_socket” file-like object class.

§

NetlinkConnectorSocket(NetlinkConnectorSocketPermission)

Permissions for the well-known SELinux “netlink_connector_socket” file-like object class.

§

NetlinkCryptoSocket(NetlinkCryptoSocketPermission)

Permissions for the well-known SELinux “netlink_crypto_socket” file-like object class.

§

NetlinkDnrtSocket(NetlinkDnrtSocketPermission)

Permissions for the well-known SELinux “netlink_dnrt_socket” file-like object class.

§

NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission)

Permissions for the well-known SELinux “netlink_fib_lookup_socket” file-like object class.

§

NetlinkFirewallSocket(NetlinkFirewallSocketPermission)

Permissions for the well-known SELinux “netlink_firewall_socket” file-like object class.

§

NetlinkGenericSocket(NetlinkGenericSocketPermission)

Permissions for the well-known SELinux “netlink_generic_socket” file-like object class.

§

NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission)

Permissions for the well-known SELinux “netlink_ip6fw_socket” file-like object class.

§

NetlinkIscsiSocket(NetlinkIscsiSocketPermission)

Permissions for the well-known SELinux “netlink_iscsi_socket” file-like object class.

§

NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission)

Permissions for the well-known SELinux “netlink_kobject_uevent_socket” file-like object class.

§

NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission)

Permissions for the well-known SELinux “netlink_netfilter_socket” file-like object class.

§

NetlinkNflogSocket(NetlinkNflogSocketPermission)

Permissions for the well-known SELinux “netlink_nflog_socket” file-like object class.

§

NetlinkRdmaSocket(NetlinkRdmaSocketPermission)

Permissions for the well-known SELinux “netlink_rdma_socket” file-like object class.

§

NetlinkRouteSocket(NetlinkRouteSocketPermission)

Permissions for the well-known SELinux “netlink_route_socket” file-like object class.

§

NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission)

Permissions for the well-known SELinux “netlink_scsitransport_socket” file-like object class.

§

NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission)

Permissions for the well-known SELinux “netlink_selinux_socket” file-like object class.

§

NetlinkSocket(NetlinkSocketPermission)

Permissions for the well-known SELinux “netlink_socket” file-like object class.

§

NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission)

Permissions for the well-known SELinux “netlink_tcpdiag_socket” file-like object class.

§

NetlinkXfrmSocket(NetlinkXfrmSocketPermission)

Permissions for the well-known SELinux “netlink_xfrm_socket” file-like object class.

§

PacketSocket(PacketSocketPermission)

Permissions for the well-known SELinux “packet_socket” object class.

§

PerfEvent(PerfEventPermission)

Permissions for the well-known SELinux “perf_event” object class.

§

Process(ProcessPermission)

Permissions for the well-known SELinux “process” object class.

§

RawIpSocket(RawIpSocketPermission)

Permissions for the well-known SELinux “rawip_socket” object class.

§

Security(SecurityPermission)

Permissions for access to parts of the “selinuxfs” used to administer and query SELinux.

§

SockFile(SockFilePermission)

Permissions for the well-known SELinux “sock_file” file-like object class.

§

Socket(SocketPermission)

Permissions for the well-known SELinux “socket” object class.

§

System(SystemPermission)

Permissions for the well-known SELinux “system” object class.

§

TcpSocket(TcpSocketPermission)

Permissions for the well-known SELinux “tcp_socket” object class.

§

UdpSocket(UdpSocketPermission)

Permissions for the well-known SELinux “udp_socket” object class.

§

UnixDgramSocket(UnixDgramSocketPermission)

Permissions for the well-known SELinux “unix_dgram_socket” object class.

§

UnixStreamSocket(UnixStreamSocketPermission)

Permissions for the well-known SELinux “unix_stream_socket” object class.

§

VSockSocket(VsockSocketPermission)

Permissions for the well-known SELinux “vsock_socket” object class.

Implementations§

Source§

impl KernelPermission

Source

pub fn name(&self) -> &'static str

Source

pub fn all_variants() -> impl Iterator<Item = Self>

Trait Implementations§

Source§

impl ClassPermission for KernelPermission

Source§

impl Clone for KernelPermission

Source§

fn clone(&self) -> KernelPermission

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for KernelPermission

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<T: Into<KernelClass>> ForClass<T> for KernelPermission

Source§

fn for_class(&self, class: T) -> KernelPermission

Returns the class-affine KernelPermission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “sys_nice” permission access based on the “allow” rules for the correct target object class.
Source§

impl From<AnonFsNodePermission> for KernelPermission

Source§

fn from(v: AnonFsNodePermission) -> Self

Converts to this type from the input type.
Source§

impl From<BinderPermission> for KernelPermission

Source§

fn from(v: BinderPermission) -> Self

Converts to this type from the input type.
Source§

impl From<BlockFilePermission> for KernelPermission

Source§

fn from(v: BlockFilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<BpfPermission> for KernelPermission

Source§

fn from(v: BpfPermission) -> Self

Converts to this type from the input type.
Source§

impl From<Capability2Permission> for KernelPermission

Source§

fn from(v: Capability2Permission) -> Self

Converts to this type from the input type.
Source§

impl From<CapabilityPermission> for KernelPermission

Source§

fn from(v: CapabilityPermission) -> Self

Converts to this type from the input type.
Source§

impl From<CharacterFilePermission> for KernelPermission

Source§

fn from(v: CharacterFilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<DirPermission> for KernelPermission

Source§

fn from(v: DirPermission) -> Self

Converts to this type from the input type.
Source§

impl From<FdPermission> for KernelPermission

Source§

fn from(v: FdPermission) -> Self

Converts to this type from the input type.
Source§

impl From<FifoFilePermission> for KernelPermission

Source§

fn from(v: FifoFilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<FilePermission> for KernelPermission

Source§

fn from(v: FilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<FileSystemPermission> for KernelPermission

Source§

fn from(v: FileSystemPermission) -> Self

Converts to this type from the input type.
Source§

impl From<KeySocketPermission> for KernelPermission

Source§

fn from(v: KeySocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<LinkFilePermission> for KernelPermission

Source§

fn from(v: LinkFilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkAuditSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkAuditSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkConnectorSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkConnectorSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkCryptoSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkCryptoSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkDnrtSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkDnrtSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkFibLookupSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkFibLookupSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkFirewallSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkFirewallSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkGenericSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkGenericSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkIp6FwSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkIp6FwSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkIscsiSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkIscsiSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkKobjectUeventSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkKobjectUeventSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkNetfilterSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkNetfilterSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkNflogSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkNflogSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkRdmaSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkRdmaSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkRouteSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkRouteSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkScsitransportSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkScsitransportSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkSelinuxSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkSelinuxSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkTcpDiagSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkTcpDiagSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<NetlinkXfrmSocketPermission> for KernelPermission

Source§

fn from(v: NetlinkXfrmSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<PacketSocketPermission> for KernelPermission

Source§

fn from(v: PacketSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<PerfEventPermission> for KernelPermission

Source§

fn from(v: PerfEventPermission) -> Self

Converts to this type from the input type.
Source§

impl From<ProcessPermission> for KernelPermission

Source§

fn from(v: ProcessPermission) -> Self

Converts to this type from the input type.
Source§

impl From<RawIpSocketPermission> for KernelPermission

Source§

fn from(v: RawIpSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<SecurityPermission> for KernelPermission

Source§

fn from(v: SecurityPermission) -> Self

Converts to this type from the input type.
Source§

impl From<SockFilePermission> for KernelPermission

Source§

fn from(v: SockFilePermission) -> Self

Converts to this type from the input type.
Source§

impl From<SocketPermission> for KernelPermission

Source§

fn from(v: SocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<SystemPermission> for KernelPermission

Source§

fn from(v: SystemPermission) -> Self

Converts to this type from the input type.
Source§

impl From<TcpSocketPermission> for KernelPermission

Source§

fn from(v: TcpSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<UdpSocketPermission> for KernelPermission

Source§

fn from(v: UdpSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<UnixDgramSocketPermission> for KernelPermission

Source§

fn from(v: UnixDgramSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<UnixStreamSocketPermission> for KernelPermission

Source§

fn from(v: UnixStreamSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl From<VsockSocketPermission> for KernelPermission

Source§

fn from(v: VsockSocketPermission) -> Self

Converts to this type from the input type.
Source§

impl Hash for KernelPermission

Source§

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher. Read more
1.3.0 · Source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
Source§

impl PartialEq for KernelPermission

Source§

fn eq(&self, other: &KernelPermission) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Eq for KernelPermission

Source§

impl StructuralPartialEq for KernelPermission

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

Source§

fn equivalent(&self, key: &K) -> bool

Checks if this value is equivalent to the given key. Read more
Source§

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

Source§

fn equivalent(&self, key: &K) -> bool

Compare self to key and return true if they are equal.
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<B, A> LockBefore<B> for A
where B: LockAfter<A>,

Source§

impl<B, A> LockEqualOrBefore<B> for A
where A: LockBefore<B>,