pub enum KernelPermission {
Show 46 variants
AnonFsNode(AnonFsNodePermission),
Binder(BinderPermission),
Block(BlockFilePermission),
Bpf(BpfPermission),
Capability(CapabilityPermission),
Capability2(Capability2Permission),
Character(CharacterFilePermission),
Dir(DirPermission),
Fd(FdPermission),
Fifo(FifoFilePermission),
File(FilePermission),
FileSystem(FileSystemPermission),
KeySocket(KeySocketPermission),
Link(LinkFilePermission),
NetlinkAuditSocket(NetlinkAuditSocketPermission),
NetlinkConnectorSocket(NetlinkConnectorSocketPermission),
NetlinkCryptoSocket(NetlinkCryptoSocketPermission),
NetlinkDnrtSocket(NetlinkDnrtSocketPermission),
NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission),
NetlinkFirewallSocket(NetlinkFirewallSocketPermission),
NetlinkGenericSocket(NetlinkGenericSocketPermission),
NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission),
NetlinkIscsiSocket(NetlinkIscsiSocketPermission),
NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission),
NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission),
NetlinkNflogSocket(NetlinkNflogSocketPermission),
NetlinkRdmaSocket(NetlinkRdmaSocketPermission),
NetlinkRouteSocket(NetlinkRouteSocketPermission),
NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission),
NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission),
NetlinkSocket(NetlinkSocketPermission),
NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission),
NetlinkXfrmSocket(NetlinkXfrmSocketPermission),
PacketSocket(PacketSocketPermission),
PerfEvent(PerfEventPermission),
Process(ProcessPermission),
RawIpSocket(RawIpSocketPermission),
Security(SecurityPermission),
SockFile(SockFilePermission),
Socket(SocketPermission),
System(SystemPermission),
TcpSocket(TcpSocketPermission),
UdpSocket(UdpSocketPermission),
UnixDgramSocket(UnixDgramSocketPermission),
UnixStreamSocket(UnixStreamSocketPermission),
VSockSocket(VsockSocketPermission),
}Expand description
A well-known (class, permission) pair in SELinux policy that has a particular meaning in
policy enforcement hooks.
Variants§
AnonFsNode(AnonFsNodePermission)
Permissions for the well-known SELinux “anon_inode” file-like object class.
Binder(BinderPermission)
Permissions for the well-known SELinux “binder” file-like object class.
Block(BlockFilePermission)
Permissions for the well-known SELinux “blk_file” file-like object class.
Bpf(BpfPermission)
Permissions for the well-known SELinux “bpf” file-like object class.
Capability(CapabilityPermission)
Permissions for the well-known SELinux “capability” object class.
Capability2(Capability2Permission)
Permissions for the well-known SELinux “capability2” object class.
Character(CharacterFilePermission)
Permissions for the well-known SELinux “chr_file” file-like object class.
Dir(DirPermission)
Permissions for the well-known SELinux “dir” file-like object class.
Fd(FdPermission)
Permissions for the well-known SELinux “fd” object class.
Fifo(FifoFilePermission)
Permissions for the well-known SELinux “fifo_file” file-like object class.
File(FilePermission)
Permissions for the well-known SELinux “file” object class.
FileSystem(FileSystemPermission)
Permissions for the well-known SELinux “filesystem” object class.
KeySocket(KeySocketPermission)
Permissions for the well-known SELinux “packet_socket” object class.
Link(LinkFilePermission)
Permissions for the well-known SELinux “lnk_file” file-like object class.
NetlinkAuditSocket(NetlinkAuditSocketPermission)
Permissions for the well-known SELinux “netlink_audit_socket” file-like object class.
NetlinkConnectorSocket(NetlinkConnectorSocketPermission)
Permissions for the well-known SELinux “netlink_connector_socket” file-like object class.
NetlinkCryptoSocket(NetlinkCryptoSocketPermission)
Permissions for the well-known SELinux “netlink_crypto_socket” file-like object class.
NetlinkDnrtSocket(NetlinkDnrtSocketPermission)
Permissions for the well-known SELinux “netlink_dnrt_socket” file-like object class.
NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission)
Permissions for the well-known SELinux “netlink_fib_lookup_socket” file-like object class.
NetlinkFirewallSocket(NetlinkFirewallSocketPermission)
Permissions for the well-known SELinux “netlink_firewall_socket” file-like object class.
NetlinkGenericSocket(NetlinkGenericSocketPermission)
Permissions for the well-known SELinux “netlink_generic_socket” file-like object class.
NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission)
Permissions for the well-known SELinux “netlink_ip6fw_socket” file-like object class.
NetlinkIscsiSocket(NetlinkIscsiSocketPermission)
Permissions for the well-known SELinux “netlink_iscsi_socket” file-like object class.
NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission)
Permissions for the well-known SELinux “netlink_kobject_uevent_socket” file-like object class.
NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission)
Permissions for the well-known SELinux “netlink_netfilter_socket” file-like object class.
NetlinkNflogSocket(NetlinkNflogSocketPermission)
Permissions for the well-known SELinux “netlink_nflog_socket” file-like object class.
NetlinkRdmaSocket(NetlinkRdmaSocketPermission)
Permissions for the well-known SELinux “netlink_rdma_socket” file-like object class.
NetlinkRouteSocket(NetlinkRouteSocketPermission)
Permissions for the well-known SELinux “netlink_route_socket” file-like object class.
NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission)
Permissions for the well-known SELinux “netlink_scsitransport_socket” file-like object class.
NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission)
Permissions for the well-known SELinux “netlink_selinux_socket” file-like object class.
NetlinkSocket(NetlinkSocketPermission)
Permissions for the well-known SELinux “netlink_socket” file-like object class.
NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission)
Permissions for the well-known SELinux “netlink_tcpdiag_socket” file-like object class.
NetlinkXfrmSocket(NetlinkXfrmSocketPermission)
Permissions for the well-known SELinux “netlink_xfrm_socket” file-like object class.
PacketSocket(PacketSocketPermission)
Permissions for the well-known SELinux “packet_socket” object class.
PerfEvent(PerfEventPermission)
Permissions for the well-known SELinux “perf_event” object class.
Process(ProcessPermission)
Permissions for the well-known SELinux “process” object class.
RawIpSocket(RawIpSocketPermission)
Permissions for the well-known SELinux “rawip_socket” object class.
Security(SecurityPermission)
Permissions for access to parts of the “selinuxfs” used to administer and query SELinux.
SockFile(SockFilePermission)
Permissions for the well-known SELinux “sock_file” file-like object class.
Socket(SocketPermission)
Permissions for the well-known SELinux “socket” object class.
System(SystemPermission)
Permissions for the well-known SELinux “system” object class.
TcpSocket(TcpSocketPermission)
Permissions for the well-known SELinux “tcp_socket” object class.
UdpSocket(UdpSocketPermission)
Permissions for the well-known SELinux “udp_socket” object class.
UnixDgramSocket(UnixDgramSocketPermission)
Permissions for the well-known SELinux “unix_dgram_socket” object class.
UnixStreamSocket(UnixStreamSocketPermission)
Permissions for the well-known SELinux “unix_stream_socket” object class.
VSockSocket(VsockSocketPermission)
Permissions for the well-known SELinux “vsock_socket” object class.
Implementations§
Trait Implementations§
Source§impl ClassPermission for KernelPermission
impl ClassPermission for KernelPermission
fn class(&self) -> KernelClass
Source§impl Clone for KernelPermission
impl Clone for KernelPermission
Source§fn clone(&self) -> KernelPermission
fn clone(&self) -> KernelPermission
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read moreSource§impl Debug for KernelPermission
impl Debug for KernelPermission
Source§impl<T: Into<KernelClass>> ForClass<T> for KernelPermission
impl<T: Into<KernelClass>> ForClass<T> for KernelPermission
Source§fn for_class(&self, class: T) -> KernelPermission
fn for_class(&self, class: T) -> KernelPermission
class-affine KernelPermission value corresponding to this common permission.
This is used to allow hooks to resolve e.g. common “sys_nice” permission access based on the
“allow” rules for the correct target object class.Source§impl From<AnonFsNodePermission> for KernelPermission
impl From<AnonFsNodePermission> for KernelPermission
Source§fn from(v: AnonFsNodePermission) -> Self
fn from(v: AnonFsNodePermission) -> Self
Source§impl From<BinderPermission> for KernelPermission
impl From<BinderPermission> for KernelPermission
Source§fn from(v: BinderPermission) -> Self
fn from(v: BinderPermission) -> Self
Source§impl From<BlockFilePermission> for KernelPermission
impl From<BlockFilePermission> for KernelPermission
Source§fn from(v: BlockFilePermission) -> Self
fn from(v: BlockFilePermission) -> Self
Source§impl From<BpfPermission> for KernelPermission
impl From<BpfPermission> for KernelPermission
Source§fn from(v: BpfPermission) -> Self
fn from(v: BpfPermission) -> Self
Source§impl From<Capability2Permission> for KernelPermission
impl From<Capability2Permission> for KernelPermission
Source§fn from(v: Capability2Permission) -> Self
fn from(v: Capability2Permission) -> Self
Source§impl From<CapabilityPermission> for KernelPermission
impl From<CapabilityPermission> for KernelPermission
Source§fn from(v: CapabilityPermission) -> Self
fn from(v: CapabilityPermission) -> Self
Source§impl From<CharacterFilePermission> for KernelPermission
impl From<CharacterFilePermission> for KernelPermission
Source§fn from(v: CharacterFilePermission) -> Self
fn from(v: CharacterFilePermission) -> Self
Source§impl From<DirPermission> for KernelPermission
impl From<DirPermission> for KernelPermission
Source§fn from(v: DirPermission) -> Self
fn from(v: DirPermission) -> Self
Source§impl From<FdPermission> for KernelPermission
impl From<FdPermission> for KernelPermission
Source§fn from(v: FdPermission) -> Self
fn from(v: FdPermission) -> Self
Source§impl From<FifoFilePermission> for KernelPermission
impl From<FifoFilePermission> for KernelPermission
Source§fn from(v: FifoFilePermission) -> Self
fn from(v: FifoFilePermission) -> Self
Source§impl From<FilePermission> for KernelPermission
impl From<FilePermission> for KernelPermission
Source§fn from(v: FilePermission) -> Self
fn from(v: FilePermission) -> Self
Source§impl From<FileSystemPermission> for KernelPermission
impl From<FileSystemPermission> for KernelPermission
Source§fn from(v: FileSystemPermission) -> Self
fn from(v: FileSystemPermission) -> Self
Source§impl From<KeySocketPermission> for KernelPermission
impl From<KeySocketPermission> for KernelPermission
Source§fn from(v: KeySocketPermission) -> Self
fn from(v: KeySocketPermission) -> Self
Source§impl From<LinkFilePermission> for KernelPermission
impl From<LinkFilePermission> for KernelPermission
Source§fn from(v: LinkFilePermission) -> Self
fn from(v: LinkFilePermission) -> Self
Source§impl From<NetlinkAuditSocketPermission> for KernelPermission
impl From<NetlinkAuditSocketPermission> for KernelPermission
Source§fn from(v: NetlinkAuditSocketPermission) -> Self
fn from(v: NetlinkAuditSocketPermission) -> Self
Source§impl From<NetlinkConnectorSocketPermission> for KernelPermission
impl From<NetlinkConnectorSocketPermission> for KernelPermission
Source§fn from(v: NetlinkConnectorSocketPermission) -> Self
fn from(v: NetlinkConnectorSocketPermission) -> Self
Source§impl From<NetlinkCryptoSocketPermission> for KernelPermission
impl From<NetlinkCryptoSocketPermission> for KernelPermission
Source§fn from(v: NetlinkCryptoSocketPermission) -> Self
fn from(v: NetlinkCryptoSocketPermission) -> Self
Source§impl From<NetlinkDnrtSocketPermission> for KernelPermission
impl From<NetlinkDnrtSocketPermission> for KernelPermission
Source§fn from(v: NetlinkDnrtSocketPermission) -> Self
fn from(v: NetlinkDnrtSocketPermission) -> Self
Source§impl From<NetlinkFibLookupSocketPermission> for KernelPermission
impl From<NetlinkFibLookupSocketPermission> for KernelPermission
Source§fn from(v: NetlinkFibLookupSocketPermission) -> Self
fn from(v: NetlinkFibLookupSocketPermission) -> Self
Source§impl From<NetlinkFirewallSocketPermission> for KernelPermission
impl From<NetlinkFirewallSocketPermission> for KernelPermission
Source§fn from(v: NetlinkFirewallSocketPermission) -> Self
fn from(v: NetlinkFirewallSocketPermission) -> Self
Source§impl From<NetlinkGenericSocketPermission> for KernelPermission
impl From<NetlinkGenericSocketPermission> for KernelPermission
Source§fn from(v: NetlinkGenericSocketPermission) -> Self
fn from(v: NetlinkGenericSocketPermission) -> Self
Source§impl From<NetlinkIp6FwSocketPermission> for KernelPermission
impl From<NetlinkIp6FwSocketPermission> for KernelPermission
Source§fn from(v: NetlinkIp6FwSocketPermission) -> Self
fn from(v: NetlinkIp6FwSocketPermission) -> Self
Source§impl From<NetlinkIscsiSocketPermission> for KernelPermission
impl From<NetlinkIscsiSocketPermission> for KernelPermission
Source§fn from(v: NetlinkIscsiSocketPermission) -> Self
fn from(v: NetlinkIscsiSocketPermission) -> Self
Source§impl From<NetlinkKobjectUeventSocketPermission> for KernelPermission
impl From<NetlinkKobjectUeventSocketPermission> for KernelPermission
Source§fn from(v: NetlinkKobjectUeventSocketPermission) -> Self
fn from(v: NetlinkKobjectUeventSocketPermission) -> Self
Source§impl From<NetlinkNetfilterSocketPermission> for KernelPermission
impl From<NetlinkNetfilterSocketPermission> for KernelPermission
Source§fn from(v: NetlinkNetfilterSocketPermission) -> Self
fn from(v: NetlinkNetfilterSocketPermission) -> Self
Source§impl From<NetlinkNflogSocketPermission> for KernelPermission
impl From<NetlinkNflogSocketPermission> for KernelPermission
Source§fn from(v: NetlinkNflogSocketPermission) -> Self
fn from(v: NetlinkNflogSocketPermission) -> Self
Source§impl From<NetlinkRdmaSocketPermission> for KernelPermission
impl From<NetlinkRdmaSocketPermission> for KernelPermission
Source§fn from(v: NetlinkRdmaSocketPermission) -> Self
fn from(v: NetlinkRdmaSocketPermission) -> Self
Source§impl From<NetlinkRouteSocketPermission> for KernelPermission
impl From<NetlinkRouteSocketPermission> for KernelPermission
Source§fn from(v: NetlinkRouteSocketPermission) -> Self
fn from(v: NetlinkRouteSocketPermission) -> Self
Source§impl From<NetlinkScsitransportSocketPermission> for KernelPermission
impl From<NetlinkScsitransportSocketPermission> for KernelPermission
Source§fn from(v: NetlinkScsitransportSocketPermission) -> Self
fn from(v: NetlinkScsitransportSocketPermission) -> Self
Source§impl From<NetlinkSelinuxSocketPermission> for KernelPermission
impl From<NetlinkSelinuxSocketPermission> for KernelPermission
Source§fn from(v: NetlinkSelinuxSocketPermission) -> Self
fn from(v: NetlinkSelinuxSocketPermission) -> Self
Source§impl From<NetlinkSocketPermission> for KernelPermission
impl From<NetlinkSocketPermission> for KernelPermission
Source§fn from(v: NetlinkSocketPermission) -> Self
fn from(v: NetlinkSocketPermission) -> Self
Source§impl From<NetlinkTcpDiagSocketPermission> for KernelPermission
impl From<NetlinkTcpDiagSocketPermission> for KernelPermission
Source§fn from(v: NetlinkTcpDiagSocketPermission) -> Self
fn from(v: NetlinkTcpDiagSocketPermission) -> Self
Source§impl From<NetlinkXfrmSocketPermission> for KernelPermission
impl From<NetlinkXfrmSocketPermission> for KernelPermission
Source§fn from(v: NetlinkXfrmSocketPermission) -> Self
fn from(v: NetlinkXfrmSocketPermission) -> Self
Source§impl From<PacketSocketPermission> for KernelPermission
impl From<PacketSocketPermission> for KernelPermission
Source§fn from(v: PacketSocketPermission) -> Self
fn from(v: PacketSocketPermission) -> Self
Source§impl From<PerfEventPermission> for KernelPermission
impl From<PerfEventPermission> for KernelPermission
Source§fn from(v: PerfEventPermission) -> Self
fn from(v: PerfEventPermission) -> Self
Source§impl From<ProcessPermission> for KernelPermission
impl From<ProcessPermission> for KernelPermission
Source§fn from(v: ProcessPermission) -> Self
fn from(v: ProcessPermission) -> Self
Source§impl From<RawIpSocketPermission> for KernelPermission
impl From<RawIpSocketPermission> for KernelPermission
Source§fn from(v: RawIpSocketPermission) -> Self
fn from(v: RawIpSocketPermission) -> Self
Source§impl From<SecurityPermission> for KernelPermission
impl From<SecurityPermission> for KernelPermission
Source§fn from(v: SecurityPermission) -> Self
fn from(v: SecurityPermission) -> Self
Source§impl From<SockFilePermission> for KernelPermission
impl From<SockFilePermission> for KernelPermission
Source§fn from(v: SockFilePermission) -> Self
fn from(v: SockFilePermission) -> Self
Source§impl From<SocketPermission> for KernelPermission
impl From<SocketPermission> for KernelPermission
Source§fn from(v: SocketPermission) -> Self
fn from(v: SocketPermission) -> Self
Source§impl From<SystemPermission> for KernelPermission
impl From<SystemPermission> for KernelPermission
Source§fn from(v: SystemPermission) -> Self
fn from(v: SystemPermission) -> Self
Source§impl From<TcpSocketPermission> for KernelPermission
impl From<TcpSocketPermission> for KernelPermission
Source§fn from(v: TcpSocketPermission) -> Self
fn from(v: TcpSocketPermission) -> Self
Source§impl From<UdpSocketPermission> for KernelPermission
impl From<UdpSocketPermission> for KernelPermission
Source§fn from(v: UdpSocketPermission) -> Self
fn from(v: UdpSocketPermission) -> Self
Source§impl From<UnixDgramSocketPermission> for KernelPermission
impl From<UnixDgramSocketPermission> for KernelPermission
Source§fn from(v: UnixDgramSocketPermission) -> Self
fn from(v: UnixDgramSocketPermission) -> Self
Source§impl From<UnixStreamSocketPermission> for KernelPermission
impl From<UnixStreamSocketPermission> for KernelPermission
Source§fn from(v: UnixStreamSocketPermission) -> Self
fn from(v: UnixStreamSocketPermission) -> Self
Source§impl From<VsockSocketPermission> for KernelPermission
impl From<VsockSocketPermission> for KernelPermission
Source§fn from(v: VsockSocketPermission) -> Self
fn from(v: VsockSocketPermission) -> Self
Source§impl Hash for KernelPermission
impl Hash for KernelPermission
Source§impl PartialEq for KernelPermission
impl PartialEq for KernelPermission
impl Eq for KernelPermission
impl StructuralPartialEq for KernelPermission
Auto Trait Implementations§
impl Freeze for KernelPermission
impl RefUnwindSafe for KernelPermission
impl Send for KernelPermission
impl Sync for KernelPermission
impl Unpin for KernelPermission
impl UnwindSafe for KernelPermission
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
key and return true if they are equal.