pub struct JobPolicyAllowlists {
pub ambient_mark_vmo_exec: Option<Vec<String>>,
pub main_process_critical: Option<Vec<String>>,
pub create_raw_processes: Option<Vec<String>>,
/* private fields */
}
Expand description
Allowlists for Zircon job policy.
Fields§
§ambient_mark_vmo_exec: Option<Vec<String>>
Allowlist entry monikers for components allowed to be given the ZX_POL_AMBIENT_MARK_VMO_EXEC job policy.
Components must request this policy by including “job_policy_ambient_mark_vmo_exec: true” in
their CML’s program
section and must be using the ELF runner.
This is equivalent to the v1 ‘deprecated-ambient-replace-as-executable’ feature.
main_process_critical: Option<Vec<String>>
Allowlist entry monikers for components allowed to have their original process marked as critical to component_manager’s job.
Components must request this critical marking by including “main_process_critical: true” in
their CML’s program
section and must be using the ELF runner.
create_raw_processes: Option<Vec<String>>
Allowlist entry monikers for components allowed to call zx_process_create directly (e.g., do not have ZX_POL_NEW_PROCESS set to ZX_POL_ACTION_DENY).
Components must request this policy by including “job_policy_create_raw_processes: true” in their manifest’s program object and must be using the ELF runner.
Trait Implementations§
Source§impl Clone for JobPolicyAllowlists
impl Clone for JobPolicyAllowlists
Source§fn clone(&self) -> JobPolicyAllowlists
fn clone(&self) -> JobPolicyAllowlists
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source
. Read moreSource§impl Debug for JobPolicyAllowlists
impl Debug for JobPolicyAllowlists
Source§impl<D: ResourceDialect> Decode<JobPolicyAllowlists, D> for JobPolicyAllowlists
impl<D: ResourceDialect> Decode<JobPolicyAllowlists, D> for JobPolicyAllowlists
Source§impl Default for JobPolicyAllowlists
impl Default for JobPolicyAllowlists
Source§fn default() -> JobPolicyAllowlists
fn default() -> JobPolicyAllowlists
Source§impl<D: ResourceDialect> Encode<JobPolicyAllowlists, D> for &JobPolicyAllowlists
impl<D: ResourceDialect> Encode<JobPolicyAllowlists, D> for &JobPolicyAllowlists
Source§impl PartialEq for JobPolicyAllowlists
impl PartialEq for JobPolicyAllowlists
Source§impl TypeMarker for JobPolicyAllowlists
impl TypeMarker for JobPolicyAllowlists
Source§type Owned = JobPolicyAllowlists
type Owned = JobPolicyAllowlists
Source§fn inline_align(_context: Context) -> usize
fn inline_align(_context: Context) -> usize
Source§fn inline_size(_context: Context) -> usize
fn inline_size(_context: Context) -> usize
inline_align
.§fn encode_is_copy() -> bool
fn encode_is_copy() -> bool
Self::Owned
matches the FIDL wire
format and encoding requires no validation. When true, we can optimize
encoding arrays and vectors of Self::Owned
to a single memcpy. Read more§fn decode_is_copy() -> bool
fn decode_is_copy() -> bool
Self::Owned
matches the FIDL wire
format and decoding requires no validation. When true, we can optimize
decoding arrays and vectors of Self::Owned
to a single memcpy.Source§impl ValueTypeMarker for JobPolicyAllowlists
impl ValueTypeMarker for JobPolicyAllowlists
Source§type Borrowed<'a> = &'a JobPolicyAllowlists
type Borrowed<'a> = &'a JobPolicyAllowlists
Encode<Self>
type cheaply obtainable from &Self::Owned
. There are three cases: Read more