Struct cm_config::JobPolicyAllowlists

pub struct JobPolicyAllowlists {
    pub ambient_mark_vmo_exec: Vec<AllowlistEntry>,
    pub main_process_critical: Vec<AllowlistEntry>,
    pub create_raw_processes: Vec<AllowlistEntry>,
}

Allowlists for Zircon job policy. Part of runtime security policy.

Fields

ambient_mark_vmo_exec: Vec<AllowlistEntry>

Entries for components allowed to be given the ZX_POL_AMBIENT_MARK_VMO_EXEC job policy.

Components must request this policy by including “job_policy_ambient_mark_vmo_exec: true” in their manifest’s program object and must be using the ELF runner. This is equivalent to the v1 ‘deprecated-ambient-replace-as-executable’ feature.

main_process_critical: Vec<AllowlistEntry>

Entries for components allowed to have their original process marked as critical to component_manager’s job.

Components must request this critical marking by including “main_process_critical: true” in their manifest’s program object and must be using the ELF runner.

create_raw_processes: Vec<AllowlistEntry>

Entries for components allowed to call zx_process_create directly (e.g., do not have ZX_POL_NEW_PROCESS set to ZX_POL_ACTION_DENY).

Components must request this policy by including “job_policy_create_raw_processes: true” in their manifest’s program object and must be using the ELF runner.

Trait Implementations

impl Clone for JobPolicyAllowlists

fn clone(&self) -> JobPolicyAllowlists

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for JobPolicyAllowlists

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for JobPolicyAllowlists

fn default() -> JobPolicyAllowlists

Returns the “default value” for a type.

impl PartialEq for JobPolicyAllowlists

fn eq(&self, other: &JobPolicyAllowlists) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for JobPolicyAllowlists

impl StructuralPartialEq for JobPolicyAllowlists