Struct AccessVectorRules 

pub struct AccessVectorRules { /* private fields */ }

Container for access vector rules optimizing rule lookups and memory layout while preserving byte-for-byte serialization.

This structure balances three primary goals:

1. Separate Rule-Type Lookup Tables: Maintains independent lookup tables for each [RuleKind] (such as allow, dontaudit, and type_transition) to avoid the overhead of hashing rule-type values and eliminate query-side type filtering.
2. Homogeneous Payload Arrays: Stores distinct rule payload types ([AccessRule], [TypeTransitionRule], and [XpermRule]) in separate contiguous arrays to eliminate memory and performance penalties from padding when mixing differently sized and aligned payload types in the same table.
3. Byte-for-Byte Serialization: Retains the original binary policy order via rule_order to re-serialize policy data losslessly without storing ordering metadata inside individual rules.

Lookups map [RuleKey] hashes to array positions via compact [U24Index] values.

Implementations

impl AccessVectorRules

pub fn new( av_rules: Box<[AccessRule]>, type_transitions: Box<[TypeTransitionRule]>, xperm_rules: Box<[XpermRule]>, rule_order: Box<[RuleKind]>, ) -> Result<Self, ParseError>

Constructs a new AccessVectorRules table and builds dedicated lookup indexes for each rule type.

pub fn find_av_decisions( &self, source: TypeId, target: TypeId, class: ClassId, ) -> AccessVectorDecision

Finds standard allow, auditallow, and dontaudit access vector decisions for the specified tuple.

pub fn find_type_transition( &self, source: TypeId, target: TypeId, class: ClassId, ) -> Option<TypeId>

Finds the target domain type transition for the specified source, target, and class tuple.

pub fn find_xperms_decisions( &self, source: TypeId, target: TypeId, class: ClassId, ) -> XpermsDecisions<'_>

Finds extended permission decisions (allowxperm, auditallowxperm, dontauditxperm) for the specified tuple.

Trait Implementations

impl Clone for AccessVectorRules

fn clone(&self) -> AccessVectorRules

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AccessVectorRules

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AccessVectorRules

impl PartialEq for AccessVectorRules

fn eq(&self, other: &Self) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.