Enum CommonFilePermission

pub enum CommonFilePermission {
    Append,
    Create,
    Execute,
    GetAttr,
    Ioctl,
    Link,
    MountOn,
    Open,
    Read,
    RelabelFrom,
    RelabelTo,
    Rename,
    SetAttr,
    Unlink,
    Write,
}

Permissions common to all file-like object classes (e.g. “lnk_file”, “dir”). These are combined with a specific FileClass by policy enforcement hooks, to obtain class-affine permission values to check.

Variants

Append

Permission to append to a file.

Create

Permission to create a file.

Execute

Permission to execute a file with domain transition.

GetAttr

Permission to query attributes, including uid, gid and extended attributes.

Ioctl

Permission to execute ioctls on the file.

Link

Permissions to create hard link.

MountOn

Permission to use as mount point; only useful for directories and files.

Open

Permission to open a file.

Read

Permission to read file contents. Note this applies to reading more than regular file’s data.

RelabelFrom

Permission checked against the existing label when updating a file’s security label.

RelabelTo

Permission checked against the new label when updating a file’s security label.

Rename

Permission to rename a file.

SetAttr

Permission to modify attributes, including uid, gid and extended attributes.

Unlink

Permission to delete a file or remove a hard link.

Write

Permission to write or append file contents.

Implementations

impl CommonFilePermission

pub fn all_variants() -> Vec<Self>

impl CommonFilePermission

pub fn for_class(&self, class: FileClass) -> Permission

Returns the class-affine Permission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “read” permission access based on the “allow” rules for the correct target object class.

Trait Implementations

impl Clone for CommonFilePermission

fn clone(&self) -> CommonFilePermission

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CommonFilePermission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for CommonFilePermission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for CommonFilePermission

fn eq(&self, other: &CommonFilePermission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for CommonFilePermission

impl StructuralPartialEq for CommonFilePermission