Struct IoctlAccessDecision

pub struct IoctlAccessDecision {
    pub allow: XpermsBitmap,
    pub auditallow: XpermsBitmap,
    pub auditdeny: XpermsBitmap,
}

Encapsulates the result of an ioctl extended permissions calculation, between source & target domains, for a specific class, and for a specific ioctl prefix byte. Decisions describe which 16-bit ioctls are allowed, and whether ioctl permissions should be audit-logged when allowed, and when denied.

In the language of https://www.kernel.org/doc/html/latest/userspace-api/ioctl/ioctl-decoding.html, an IoctlAccessDecision provides allow, audit-allow, and audit-deny decisions for the 256 possible function codes for a particular driver code.

Fields

allow: XpermsBitmap

auditallow: XpermsBitmap

auditdeny: XpermsBitmap

Implementations

impl IoctlAccessDecision

pub const DENY_ALL: Self

pub const ALLOW_ALL: Self

Trait Implementations

impl Clone for IoctlAccessDecision

fn clone(&self) -> IoctlAccessDecision

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for IoctlAccessDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for IoctlAccessDecision

fn eq(&self, other: &IoctlAccessDecision) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for IoctlAccessDecision