Re-exports§
pub use security_server::SecurityServer;pub use policy::ClassId;
Modules§
Structs§
- File
System Label - File
System Mount Options - SELinux security context-related filesystem mount options. These options are documented in the
context=context, fscontext=context, defcontext=context, and rootcontext=contextsection of themount(8)manpage. - File
System Mount Sids - Nulless
Byte Str - A borrowed byte slice that contains no
NULcharacters by truncating the input slice at the firstNUL(if any) upon construction. - SeLinux
Status - Status information parameter for the
SeLinuxStatusPublisherinterface. - Security
Id - Identifies a Security Context.
- Task
Attrs - The SELinux security structure for
ThreadGroup.
Enums§
- Anon
FsNode Permission - Allow callers to use the kernel class & permission definitions.
- Binder
Permission - Allow callers to use the kernel class & permission definitions.
- Block
File Permission - Allow callers to use the kernel class & permission definitions.
- BpfPermission
- Allow callers to use the kernel class & permission definitions.
- Cap2
Class - Allow callers to use the kernel class & permission definitions. Covers the set of classes that inherit from the common “cap2” symbol (e.g. “capability2” for now and “cap2_userns” after Starnix gains user namespacing support).
- CapClass
- Allow callers to use the kernel class & permission definitions. Covers the set of classes that inherit from the common “cap” symbol (e.g. “capability” for now and “cap_userns” after Starnix gains user namespacing support).
- Capability2
Permission - Allow callers to use the kernel class & permission definitions. Permissions for the kernel “capability” class.
- Capability
Permission - Allow callers to use the kernel class & permission definitions.
- Character
File Permission - Allow callers to use the kernel class & permission definitions.
- Common
Cap2 Permission - Allow callers to use the kernel class & permission definitions. Common symbol inherited by “capability2” and “capuser2” classes.
- Common
CapPermission - Allow callers to use the kernel class & permission definitions.
- Common
File Permission - Allow callers to use the kernel class & permission definitions.
- Common
FsNode Permission - Allow callers to use the kernel class & permission definitions.
- Common
Socket Permission - Allow callers to use the kernel class & permission definitions.
- DirPermission
- Allow callers to use the kernel class & permission definitions.
- FdPermission
- Allow callers to use the kernel class & permission definitions.
- Fifo
File Permission - Allow callers to use the kernel class & permission definitions.
- File
Class - Allow callers to use the kernel class & permission definitions. A well-known file-like class in SELinux policy that has a particular meaning in policy enforcement hooks.
- File
Permission - Allow callers to use the kernel class & permission definitions.
- File
System Labeling Scheme - File
System Permission - Allow callers to use the kernel class & permission definitions.
- FsNode
Class - Allow callers to use the kernel class & permission definitions.
Container for a security class that could be associated with a [
crate::vfs::FsNode], to allow permissions common to both file-like and socket-like classes to be generated easily by hooks. - Icmp
Socket Permission - Allow callers to use the kernel class & permission definitions.
- Initial
Sid - Initial Security Identifier (SID) values actually used by this implementation. These must be present in the policy, for it to be valid.
- Kernel
Class - Allow callers to use the kernel class & permission definitions. A well-known class in SELinux policy that has a particular meaning in policy enforcement hooks.
- Kernel
Permission - Allow callers to use the kernel class & permission definitions.
A well-known
(class, permission)pair in SELinux policy that has a particular meaning in policy enforcement hooks. - KeySocket
Permission - Allow callers to use the kernel class & permission definitions.
- Link
File Permission - Allow callers to use the kernel class & permission definitions.
- MemFd
File Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Audit Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Connector Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Crypto Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Dnrt Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
FibLookup Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Firewall Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Generic Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Ip6Fw Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Iscsi Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Kobject Uevent Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Netfilter Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Nflog Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Rdma Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Route Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Scsitransport Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Selinux Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
TcpDiag Socket Permission - Allow callers to use the kernel class & permission definitions.
- Netlink
Xfrm Socket Permission - Allow callers to use the kernel class & permission definitions.
- Object
Class - Identifies a specific class by its policy-defined Id, or as a kernel object class enum Id.
- Packet
Socket Permission - Allow callers to use the kernel class & permission definitions.
- Perf
Event Permission - Allow callers to use the kernel class & permission definitions.
- Policy
Cap - Reference policy capability Ids.
- Process2
Permission - Allow callers to use the kernel class & permission definitions.
- Process
Permission - Allow callers to use the kernel class & permission definitions.
- Qipcrtr
Socket Permission - Allow callers to use the kernel class & permission definitions.
- RawIp
Socket Permission - Allow callers to use the kernel class & permission definitions.
- Reference
Initial Sid - Initial Security Identifier (SID) values defined by the SELinux Reference Policy. Where the SELinux Reference Policy retains definitions for some deprecated initial SIDs, this enum omits deprecated entries for clarity.
- Sctp
Socket Permission - Allow callers to use the kernel class & permission definitions.
- Security
Permission - Allow callers to use the kernel class & permission definitions.
- Sock
File Permission - Allow callers to use the kernel class & permission definitions.
- Socket
Class - Allow callers to use the kernel class & permission definitions. Distinguishes socket-like kernel object classes defined in SELinux policy.
- Socket
Permission - Allow callers to use the kernel class & permission definitions.
- System
Permission - Allow callers to use the kernel class & permission definitions.
- TcpSocket
Permission - Allow callers to use the kernel class & permission definitions.
- TunSocket
Permission - Allow callers to use the kernel class & permission definitions.
- UdpSocket
Permission - Allow callers to use the kernel class & permission definitions.
- Unix
Dgram Socket Permission - Allow callers to use the kernel class & permission definitions.
- Unix
Stream Socket Permission - Allow callers to use the kernel class & permission definitions.
- Vsock
Socket Permission - Allow callers to use the kernel class & permission definitions.
Traits§
- Class
Permission - Allow callers to use the kernel class & permission definitions.
- ForClass
- Allow callers to use the kernel class & permission definitions.
- SeLinux
Status Publisher - Interface for security server to interact with selinuxfs status file.