selinux/new_policy/
traits.rs

1// Copyright 2026 The Fuchsia Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5use super::NewPolicy;
6use super::error::{ParseError, SerializeError, ValidateError};
7use super::parser::PolicyCursor;
8
9/// Trait for types that can be parsed from a [`PolicyCursor`].
10pub trait Parse: Sized {
11    fn parse(cursor: &mut PolicyCursor<'_>) -> Result<Self, ParseError>;
12}
13
14/// Trait for types that can be serialized into a byte vector.
15pub trait Serialize {
16    fn serialize(&self, writer: &mut Vec<u8>) -> Result<(), SerializeError>;
17}
18
19/// Trait for types that can be validated against the parsed policy.
20pub trait Validate {
21    fn validate(&self, policy: &NewPolicy) -> Result<(), ValidateError>;
22}
23
24/// Trait for strongly-typed policy identifiers.
25///
26/// Types implementing [`PolicyId`] can be parsed from and serialized to `u32` values
27/// in the binary policy database, but are represented as strongly-typed integers
28/// (often wrapping `NonZeroU16` or `NonZeroU32`) in the logical domain model.
29pub trait PolicyId:
30    Copy + Clone + std::fmt::Debug + Eq + std::hash::Hash + Ord + PartialOrd
31{
32    /// Returns the raw `u32` value of the ID.
33    fn as_u32(&self) -> u32;
34
35    /// Constructs an instance of [`Self`] from a raw `u32` value, returning [`None`]
36    /// if the value is invalid (e.g. zero for a non-optional ID, or out of range).
37    fn from_u32(value: u32) -> Option<Self>;
38}
39
40// Blanket implementations for all strongly-typed IDs
41impl<T> Parse for T
42where
43    T: PolicyId,
44{
45    fn parse(cursor: &mut PolicyCursor<'_>) -> Result<Self, ParseError> {
46        let value = u32::parse(cursor)?;
47        T::from_u32(value).ok_or(ParseError::InvalidId { value })
48    }
49}
50
51impl<T> Serialize for T
52where
53    T: PolicyId,
54{
55    fn serialize(&self, writer: &mut Vec<u8>) -> Result<(), SerializeError> {
56        self.as_u32().serialize(writer)
57    }
58}
59
60/// Trait for policy elements with a byte slice name.
61pub trait HasName {
62    fn name(&self) -> &[u8];
63}
64
65/// Trait for policy elements that have a strongly-typed policy identifier.
66pub trait HasPolicyId {
67    type Id: PolicyId;
68    fn id(&self) -> Self::Id;
69}
70
71impl Validate for Box<[u8]> {
72    fn validate(&self, _policy: &NewPolicy) -> Result<(), ValidateError> {
73        Ok(())
74    }
75}
76
77impl<T: Validate> Validate for Box<T> {
78    fn validate(&self, policy: &NewPolicy) -> Result<(), ValidateError> {
79        (**self).validate(policy)
80    }
81}
82
83impl Validate for bool {
84    fn validate(&self, _policy: &NewPolicy) -> Result<(), ValidateError> {
85        Ok(())
86    }
87}
88
89impl<T: Validate> Validate for Option<T> {
90    fn validate(&self, policy: &NewPolicy) -> Result<(), ValidateError> {
91        if let Some(value) = self {
92            value.validate(policy)?;
93        }
94        Ok(())
95    }
96}
selinux/new_policy/traits.rs

selinux/new_policy/
traits.rs
