Enum KernelPermission 

#[repr(u32)]
pub enum KernelPermission {
    AnonFsNode(AnonFsNodePermission),
    Binder(BinderPermission),
    BlkFile(BlkFilePermission),
    Bpf(BpfPermission),
    Capability(CapabilityPermission),
    Capability2(Capability2Permission),
    ChrFile(ChrFilePermission),
    Dir(DirPermission),
    Fd(FdPermission),
    FifoFile(FifoFilePermission),
    File(FilePermission),
    FileSystem(FileSystemPermission),
    IcmpSocket(IcmpSocketPermission),
    KeySocket(KeySocketPermission),
    LnkFile(LnkFilePermission),
    MemFdFile(MemFdFilePermission),
    NetlinkAuditSocket(NetlinkAuditSocketPermission),
    NetlinkConnectorSocket(NetlinkConnectorSocketPermission),
    NetlinkCryptoSocket(NetlinkCryptoSocketPermission),
    NetlinkDnrtSocket(NetlinkDnrtSocketPermission),
    NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission),
    NetlinkFirewallSocket(NetlinkFirewallSocketPermission),
    NetlinkGenericSocket(NetlinkGenericSocketPermission),
    NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission),
    NetlinkIscsiSocket(NetlinkIscsiSocketPermission),
    NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission),
    NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission),
    NetlinkNflogSocket(NetlinkNflogSocketPermission),
    NetlinkRdmaSocket(NetlinkRdmaSocketPermission),
    NetlinkRouteSocket(NetlinkRouteSocketPermission),
    NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission),
    NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission),
    NetlinkSocket(NetlinkSocketPermission),
    NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission),
    NetlinkXfrmSocket(NetlinkXfrmSocketPermission),
    PacketSocket(PacketSocketPermission),
    PerfEvent(PerfEventPermission),
    Process(ProcessPermission),
    Process2(Process2Permission),
    QipcrtrSocket(QipcrtrSocketPermission),
    RawIpSocket(RawIpSocketPermission),
    SctpSocket(SctpSocketPermission),
    Security(SecurityPermission),
    SockFile(SockFilePermission),
    Socket(SocketPermission),
    System(SystemPermission),
    TcpSocket(TcpSocketPermission),
    TunSocket(TunSocketPermission),
    UdpSocket(UdpSocketPermission),
    UnixDgramSocket(UnixDgramSocketPermission),
    UnixStreamSocket(UnixStreamSocketPermission),
    VsockSocket(VsockSocketPermission),
}

Allow callers to use the kernel class & permission definitions. A well-known class in SELinux policy that has a particular meaning in policy enforcement hooks.

Variants

AnonFsNode(AnonFsNodePermission)

The SELinux “anon_inode” object class.

Binder(BinderPermission)

The SELinux “binder” object class.

BlkFile(BlkFilePermission)

The SELinux “blk_file” object class.

Bpf(BpfPermission)

The SELinux “bpf” object class.

Capability(CapabilityPermission)

The SELinux “capability” object class.

Capability2(Capability2Permission)

The SELinux “capability2” object class.

ChrFile(ChrFilePermission)

The SELinux “chr_file” object class.

Dir(DirPermission)

The SELinux “dir” object class.

Fd(FdPermission)

The SELinux “fd” object class.

FifoFile(FifoFilePermission)

The SELinux “fifo_file” object class.

File(FilePermission)

The SELinux “file” object class.

FileSystem(FileSystemPermission)

The SELinux “filesystem” object class.

IcmpSocket(IcmpSocketPermission)

“icmp_socket” class enabled via the “extended_socket_class” policy capability.

KeySocket(KeySocketPermission)

The SELinux “key_socket” object class.

LnkFile(LnkFilePermission)

The SELinux “lnk_file” object class.

MemFdFile(MemFdFilePermission)

The SELinux “memfd_file” object class.

NetlinkAuditSocket(NetlinkAuditSocketPermission)

The SELinux “netlink_audit_socket” object class.

NetlinkConnectorSocket(NetlinkConnectorSocketPermission)

The SELinux “netlink_connector_socket” object class.

NetlinkCryptoSocket(NetlinkCryptoSocketPermission)

The SELinux “netlink_crypto_socket” object class.

NetlinkDnrtSocket(NetlinkDnrtSocketPermission)

The SELinux “netlink_dnrt_socket” object class.

NetlinkFibLookupSocket(NetlinkFibLookupSocketPermission)

The SELinux “netlink_fib_lookup_socket” object class.

NetlinkFirewallSocket(NetlinkFirewallSocketPermission)

The SELinux “netlink_firewall_socket” object class.

NetlinkGenericSocket(NetlinkGenericSocketPermission)

The SELinux “netlink_generic_socket” object class.

NetlinkIp6FwSocket(NetlinkIp6FwSocketPermission)

The SELinux “netlink_ip6fw_socket” object class.

NetlinkIscsiSocket(NetlinkIscsiSocketPermission)

The SELinux “netlink_iscsi_socket” object class.

NetlinkKobjectUeventSocket(NetlinkKobjectUeventSocketPermission)

The SELinux “netlink_kobject_uevent_socket” object class.

NetlinkNetfilterSocket(NetlinkNetfilterSocketPermission)

The SELinux “netlink_netfilter_socket” object class.

NetlinkNflogSocket(NetlinkNflogSocketPermission)

The SELinux “netlink_nflog_socket” object class.

NetlinkRdmaSocket(NetlinkRdmaSocketPermission)

The SELinux “netlink_rdma_socket” object class.

NetlinkRouteSocket(NetlinkRouteSocketPermission)

The SELinux “netlink_route_socket” object class.

NetlinkScsitransportSocket(NetlinkScsitransportSocketPermission)

The SELinux “netlink_scsitransport_socket” object class.

NetlinkSelinuxSocket(NetlinkSelinuxSocketPermission)

The SELinux “netlink_selinux_socket” object class.

NetlinkSocket(NetlinkSocketPermission)

The SELinux “netlink_socket” object class.

NetlinkTcpDiagSocket(NetlinkTcpDiagSocketPermission)

The SELinux “netlink_tcpdiag_socket” object class.

NetlinkXfrmSocket(NetlinkXfrmSocketPermission)

The SELinux “netlink_xfrm_socket” object class.

PacketSocket(PacketSocketPermission)

The SELinux “packet_socket” object class.

PerfEvent(PerfEventPermission)

The SELinux “perf_event” object class.

Process(ProcessPermission)

The SELinux “process” object class.

Process2(Process2Permission)

The SELinux “process2” object class.

QipcrtrSocket(QipcrtrSocketPermission)

The SELinux “qipcrtr_socket” object class.

RawIpSocket(RawIpSocketPermission)

The SELinux “rawip_socket” object class.

SctpSocket(SctpSocketPermission)

“sctp_socket” class enabled via the “extended_socket_class” policy capability.

Security(SecurityPermission)

The SELinux “security” object class.

SockFile(SockFilePermission)

The SELinux “sock_file” object class.

Socket(SocketPermission)

The SELinux “socket” object class.

System(SystemPermission)

The SELinux “system” object class.

TcpSocket(TcpSocketPermission)

The SELinux “tcp_socket” object class.

TunSocket(TunSocketPermission)

The SELinux “tun_socket” object class.

UdpSocket(UdpSocketPermission)

The SELinux “udp_socket” object class.

UnixDgramSocket(UnixDgramSocketPermission)

The SELinux “unix_dgram_socket” object class.

UnixStreamSocket(UnixStreamSocketPermission)

The SELinux “unix_stream_socket” object class.

VsockSocket(VsockSocketPermission)

“vsock_socket” class enabled via the “extended_socket_class” policy capability.

Implementations

impl KernelPermission

pub fn name(&self) -> &'static str

pub fn all_variants() -> impl Iterator<Item = Self>

Trait Implementations

impl ClassPermission for KernelPermission

fn class(&self) -> KernelClass

fn id(&self) -> u8

fn as_access_vector(&self) -> AccessVector

impl Clone for KernelPermission

fn clone(&self) -> KernelPermission

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for KernelPermission

impl Debug for KernelPermission

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for KernelPermission

impl<T: Into<KernelClass>> ForClass<T> for KernelPermission

fn for_class(&self, class: T) -> KernelPermission

Returns the class-affine KernelPermission value corresponding to this common permission. This is used to allow hooks to resolve e.g. common “sys_nice” permission access based on the “allow” rules for the correct target object class.

impl From<AnonFsNodePermission> for KernelPermission

fn from(v: AnonFsNodePermission) -> Self

Converts to this type from the input type.

impl From<BinderPermission> for KernelPermission

fn from(v: BinderPermission) -> Self

Converts to this type from the input type.

impl From<BlkFilePermission> for KernelPermission

fn from(v: BlkFilePermission) -> Self

Converts to this type from the input type.

impl From<BpfPermission> for KernelPermission

fn from(v: BpfPermission) -> Self

Converts to this type from the input type.

impl From<Capability2Permission> for KernelPermission

fn from(v: Capability2Permission) -> Self

Converts to this type from the input type.

impl From<CapabilityPermission> for KernelPermission

fn from(v: CapabilityPermission) -> Self

Converts to this type from the input type.

impl From<ChrFilePermission> for KernelPermission

fn from(v: ChrFilePermission) -> Self

Converts to this type from the input type.

impl From<DirPermission> for KernelPermission

fn from(v: DirPermission) -> Self

Converts to this type from the input type.

impl From<FdPermission> for KernelPermission

fn from(v: FdPermission) -> Self

Converts to this type from the input type.

impl From<FifoFilePermission> for KernelPermission

fn from(v: FifoFilePermission) -> Self

Converts to this type from the input type.

impl From<FilePermission> for KernelPermission

fn from(v: FilePermission) -> Self

Converts to this type from the input type.

impl From<FileSystemPermission> for KernelPermission

fn from(v: FileSystemPermission) -> Self

Converts to this type from the input type.

impl From<IcmpSocketPermission> for KernelPermission

fn from(v: IcmpSocketPermission) -> Self

Converts to this type from the input type.

impl From<KeySocketPermission> for KernelPermission

fn from(v: KeySocketPermission) -> Self

Converts to this type from the input type.

impl From<LnkFilePermission> for KernelPermission

fn from(v: LnkFilePermission) -> Self

Converts to this type from the input type.

impl From<MemFdFilePermission> for KernelPermission

fn from(v: MemFdFilePermission) -> Self

Converts to this type from the input type.

impl From<NetlinkAuditSocketPermission> for KernelPermission

fn from(v: NetlinkAuditSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkConnectorSocketPermission> for KernelPermission

fn from(v: NetlinkConnectorSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkCryptoSocketPermission> for KernelPermission

fn from(v: NetlinkCryptoSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkDnrtSocketPermission> for KernelPermission

fn from(v: NetlinkDnrtSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkFibLookupSocketPermission> for KernelPermission

fn from(v: NetlinkFibLookupSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkFirewallSocketPermission> for KernelPermission

fn from(v: NetlinkFirewallSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkGenericSocketPermission> for KernelPermission

fn from(v: NetlinkGenericSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkIp6FwSocketPermission> for KernelPermission

fn from(v: NetlinkIp6FwSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkIscsiSocketPermission> for KernelPermission

fn from(v: NetlinkIscsiSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkKobjectUeventSocketPermission> for KernelPermission

fn from(v: NetlinkKobjectUeventSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkNetfilterSocketPermission> for KernelPermission

fn from(v: NetlinkNetfilterSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkNflogSocketPermission> for KernelPermission

fn from(v: NetlinkNflogSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkRdmaSocketPermission> for KernelPermission

fn from(v: NetlinkRdmaSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkRouteSocketPermission> for KernelPermission

fn from(v: NetlinkRouteSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkScsitransportSocketPermission> for KernelPermission

fn from(v: NetlinkScsitransportSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkSelinuxSocketPermission> for KernelPermission

fn from(v: NetlinkSelinuxSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkSocketPermission> for KernelPermission

fn from(v: NetlinkSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkTcpDiagSocketPermission> for KernelPermission

fn from(v: NetlinkTcpDiagSocketPermission) -> Self

Converts to this type from the input type.

impl From<NetlinkXfrmSocketPermission> for KernelPermission

fn from(v: NetlinkXfrmSocketPermission) -> Self

Converts to this type from the input type.

impl From<PacketSocketPermission> for KernelPermission

fn from(v: PacketSocketPermission) -> Self

Converts to this type from the input type.

impl From<PerfEventPermission> for KernelPermission

fn from(v: PerfEventPermission) -> Self

Converts to this type from the input type.

impl From<Process2Permission> for KernelPermission

fn from(v: Process2Permission) -> Self

Converts to this type from the input type.

impl From<ProcessPermission> for KernelPermission

fn from(v: ProcessPermission) -> Self

Converts to this type from the input type.

impl From<QipcrtrSocketPermission> for KernelPermission

fn from(v: QipcrtrSocketPermission) -> Self

Converts to this type from the input type.

impl From<RawIpSocketPermission> for KernelPermission

fn from(v: RawIpSocketPermission) -> Self

Converts to this type from the input type.

impl From<SctpSocketPermission> for KernelPermission

fn from(v: SctpSocketPermission) -> Self

Converts to this type from the input type.

impl From<SecurityPermission> for KernelPermission

fn from(v: SecurityPermission) -> Self

Converts to this type from the input type.

impl From<SockFilePermission> for KernelPermission

fn from(v: SockFilePermission) -> Self

Converts to this type from the input type.

impl From<SocketPermission> for KernelPermission

fn from(v: SocketPermission) -> Self

Converts to this type from the input type.

impl From<SystemPermission> for KernelPermission

fn from(v: SystemPermission) -> Self

Converts to this type from the input type.

impl From<TcpSocketPermission> for KernelPermission

fn from(v: TcpSocketPermission) -> Self

Converts to this type from the input type.

impl From<TunSocketPermission> for KernelPermission

fn from(v: TunSocketPermission) -> Self

Converts to this type from the input type.

impl From<UdpSocketPermission> for KernelPermission

fn from(v: UdpSocketPermission) -> Self

Converts to this type from the input type.

impl From<UnixDgramSocketPermission> for KernelPermission

fn from(v: UnixDgramSocketPermission) -> Self

Converts to this type from the input type.

impl From<UnixStreamSocketPermission> for KernelPermission

fn from(v: UnixStreamSocketPermission) -> Self

Converts to this type from the input type.

impl From<VsockSocketPermission> for KernelPermission

fn from(v: VsockSocketPermission) -> Self

Converts to this type from the input type.

impl Hash for KernelPermission

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for KernelPermission

fn eq(&self, other: &KernelPermission) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for KernelPermission