Struct IndexedAccessVectorRules 

pub struct IndexedAccessVectorRules { /* private fields */ }

Global access vector rules wrapper that indexes rules by source, target, and class.

Binary policies guarantee that rules for the same key in the global table are contiguous. Three corresponding HashTables map [RuleKey]s to the index of the first matching rule. Lookups return an iterator that starts at that index and yields rules until the key changes.

Implementations

impl IndexedAccessVectorRules

pub fn new(rules: AccessVectorRules) -> Result<Self, ParseError>

Builds an index over the specified access vector rules.

Returns [ParseError::DuplicateAccessVectorRule] if non-contiguous rules share the same key.

pub fn rules(&self) -> &AccessVectorRules

Returns a reference to the underlying unindexed access vector rules.

pub fn find_av_rules( &self, source: TypeId, target: TypeId, class: ClassId, ) -> impl Iterator<Item = &AccessRule>

Returns an iterator yielding matching standard access vector rules for the specified tuple.

pub fn find_type_rules( &self, source: TypeId, target: TypeId, class: ClassId, ) -> impl Iterator<Item = &TypeRule>

Returns an iterator yielding matching type transition, change, or member rules for the specified tuple.

pub fn find_xperm_rules( &self, source: TypeId, target: TypeId, class: ClassId, ) -> impl Iterator<Item = &XpermRule>

Returns an iterator yielding matching extended permission rules for the specified tuple.

Trait Implementations

impl Clone for IndexedAccessVectorRules

fn clone(&self) -> IndexedAccessVectorRules

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IndexedAccessVectorRules

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.