pub enum SecurityPermission {
CheckContext,
ComputeAv,
ComputeCreate,
ComputeMember,
ComputeRelabel,
ComputeUser,
LoadPolicy,
SetBool,
SetCheckReqProt,
SetEnforce,
}Expand description
A well-known “security” class permission in SELinux policy, used to control access to sensitive administrative and query API surfaces in the “selinuxfs”.
Variants§
CheckContext
Permission to validate Security Context using the “context” API.
ComputeAv
Permission to compute access vectors via the “access” API.
ComputeCreate
Permission to compute security contexts based on type_transition rules via “create”.
ComputeMember
Permission to compute security contexts based on type_member rules via “member”.
ComputeRelabel
Permission to compute security contexts based on type_change rules via “relabel”.
ComputeUser
Permission to compute user decisions via “user”.
LoadPolicy
Permission to load a new binary policy into the kernel via the “load” API.
SetBool
Permission to commit booleans to control conditional elements of the policy.
SetCheckReqProt
Permission to change the way permissions are validated for mmap() operations.
SetEnforce
Permission to switch the system between permissive and enforcing modes, via “enforce”.
Implementations§
Source§impl SecurityPermission
impl SecurityPermission
pub fn all_variants() -> impl Iterator<Item = Self>
Trait Implementations§
Source§impl ClassPermission for SecurityPermission
impl ClassPermission for SecurityPermission
fn class(&self) -> KernelClass
Source§impl Clone for SecurityPermission
impl Clone for SecurityPermission
Source§fn clone(&self) -> SecurityPermission
fn clone(&self) -> SecurityPermission
1.0.0 · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more