Re-exports§
pub use policy::ClassId;pub use policy::FsUseType;pub use policy::PolicyCap;pub use security_server::PolicySeqNo;pub use security_server::SecurityServer;
Modules§
Structs§
- Access
Cache Storage - Access
Query Args - Cache
Stats - Performance statistics of a cache implementation.
- File
System Label - File
System Mount Options - SELinux security context-related filesystem mount options. These options are documented in the
context=context, fscontext=context, defcontext=context, and rootcontext=contextsection of themount(8)manpage. - File
System Mount Sids - Kernel
Access Decision - Access decision translated into kernel permission bit positions for a
KernelClass. - Nulless
Byte Str - A borrowed byte slice that contains no
NULcharacters by truncating the input slice at the firstNUL(if any) upon construction. - PerThread
Cache - Per-thread cache for SELinux policy decisions.
- Query
Cache Capacity - SeLinux
Status - Status information parameter for the
SeLinuxStatusPublisherinterface. - Security
Id - Identifies a Security Context.
- Task
Attrs - The SELinux security structure for
ThreadGroup.
Enums§
- Anon
FsNode Permission - Binder
Permission - BlkFile
Permission - BpfPermission
- Cap2
Class - Covers the set of classes that inherit from the common “cap2” symbol (e.g. “capability2” for now and “cap2_userns” after Starnix gains user namespacing support).
- CapClass
- Covers the set of classes that inherit from the common “cap” symbol (e.g. “capability” for now and “cap_userns” after Starnix gains user namespacing support).
- Capability2
Permission - Permissions for the kernel “capability” class.
- Capability
Permission - ChrFile
Permission - Common
Cap2 Permission - Common symbol inherited by “capability2” and “capuser2” classes.
- Common
CapPermission - Common
File Permission - Common
FsNode Permission - Common
Socket Permission - DirPermission
- FdPermission
- Fifo
File Permission - File
Class - A well-known file-like class in SELinux policy that has a particular meaning in policy enforcement hooks.
- File
Permission - File
System Labeling Scheme - File
System Permission - FsNode
Class - Container for a security class that could be associated with a [
crate::vfs::FsNode], to allow permissions common to both file-like and socket-like classes to be generated easily by hooks. - Icmp
Socket Permission - Initial
Sid - Initial Security Identifier (SID) values actually used by this implementation. These must be present in the policy, for it to be valid.
- Kernel
Class - Well-known class in SELinux policy that has a particular meaning in policy enforcement hooks.
- Kernel
Permission - Well-known class in SELinux policy that has a particular meaning in policy enforcement hooks.
- KeyPermission
- KeySocket
Permission - LnkFile
Permission - MemFd
File Permission - Netlink
Audit Socket Permission - Netlink
Connector Socket Permission - Netlink
Crypto Socket Permission - Netlink
Dnrt Socket Permission - Netlink
FibLookup Socket Permission - Netlink
Firewall Socket Permission - Netlink
Generic Socket Permission - Netlink
Ip6Fw Socket Permission - Netlink
Iscsi Socket Permission - Netlink
Kobject Uevent Socket Permission - Netlink
Netfilter Socket Permission - Netlink
Nflog Socket Permission - Netlink
Rdma Socket Permission - Netlink
Route Socket Permission - Netlink
Scsitransport Socket Permission - Netlink
Selinux Socket Permission - Netlink
Socket Permission - Netlink
TcpDiag Socket Permission - Netlink
Xfrm Socket Permission - Object
Class - Identifies a specific class by its policy-defined Id, or as a kernel object class enum Id.
- Packet
Socket Permission - Perf
Event Permission - Process2
Permission - Process
Permission - Qipcrtr
Socket Permission - RawIp
Socket Permission - Reference
Initial Sid - Initial Security Identifier (SID) values defined by the SELinux Reference Policy. Where the SELinux Reference Policy retains definitions for some deprecated initial SIDs, this enum omits deprecated entries for clarity.
- Sctp
Socket Permission - Security
Permission - Sock
File Permission - Socket
Class - Distinguishes socket-like kernel object classes defined in SELinux policy.
- Socket
Permission - System
Permission - TcpSocket
Permission - TunSocket
Permission - UdpSocket
Permission - Unix
Dgram Socket Permission - Unix
Stream Socket Permission - Vsock
Socket Permission
Constants§
- DEFAULT_
SHARED_ SIZE - Default size of an access vector cache shared by all threads in the system.
Traits§
- Class
Permission - ForClass
- SeLinux
Status Publisher - Interface for security server to interact with selinuxfs status file.
Type Aliases§
- Concurrent
Access Cache - Cache for access decisions. This cache has 4 slots per bucket, with 25 bytes of inline storage. A bucket is 128 bytes.