pub struct NormalizationPolicy {
pub exec_basename_match: bool,
pub ldd_closure: bool,
pub nss_closure_fallback: bool,
pub python_closure_fallback: bool,
pub missing_so_canary: bool,
pub rootfs_cache: bool,
}Expand description
Toggles for the automatic “normalizations” (assists) — each defaults to today’s always-on behavior; only loosening-safe ones are exposed as on/off (safety normalizations like fs canonicalization and env-scrub are intentionally absent here — see ADR 0017).
Fields§
§exec_basename_match: boolMatch a granted bare exec name against a program’s basename (context.rs).
ldd_closure: boolResolve a dynamic program’s ldd shared-library closure (rootfs.rs).
nss_closure_fallback: bool#113 fallback: add glibc NSS modules to the closure.
python_closure_fallback: bool#113 fallback: add the Python stdlib dirs when a python* is granted.
missing_so_canary: boolEmit the missing-.so deny-of-function canary diagnostic (jaild).
rootfs_cache: boolUse the content-addressed rootfs build cache.
Trait Implementations§
Source§impl Clone for NormalizationPolicy
impl Clone for NormalizationPolicy
Source§fn clone(&self) -> NormalizationPolicy
fn clone(&self) -> NormalizationPolicy
Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from
source. Read moreSource§impl Debug for NormalizationPolicy
impl Debug for NormalizationPolicy
Source§impl Default for NormalizationPolicy
impl Default for NormalizationPolicy
Source§fn default() -> NormalizationPolicy
fn default() -> NormalizationPolicy
Returns the “default value” for a type. Read more
Source§impl<'de> Deserialize<'de> for NormalizationPolicy
impl<'de> Deserialize<'de> for NormalizationPolicy
Source§fn deserialize<__D>(
__deserializer: __D,
) -> Result<NormalizationPolicy, <__D as Deserializer<'de>>::Error>where
__D: Deserializer<'de>,
fn deserialize<__D>(
__deserializer: __D,
) -> Result<NormalizationPolicy, <__D as Deserializer<'de>>::Error>where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
impl Eq for NormalizationPolicy
Source§impl PartialEq for NormalizationPolicy
impl PartialEq for NormalizationPolicy
Source§impl Serialize for NormalizationPolicy
impl Serialize for NormalizationPolicy
Source§fn serialize<__S>(
&self,
__serializer: __S,
) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>where
__S: Serializer,
fn serialize<__S>(
&self,
__serializer: __S,
) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>where
__S: Serializer,
Serialize this value into the given Serde serializer. Read more
impl StructuralPartialEq for NormalizationPolicy
Auto Trait Implementations§
impl Freeze for NormalizationPolicy
impl RefUnwindSafe for NormalizationPolicy
impl Send for NormalizationPolicy
impl Sync for NormalizationPolicy
impl Unpin for NormalizationPolicy
impl UnsafeUnpin for NormalizationPolicy
impl UnwindSafe for NormalizationPolicy
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
Source§impl<T> CloneToUninit for Twhere
T: Clone,
impl<T> CloneToUninit for Twhere
T: Clone,
Source§impl<F, T> ConvertInto<T> for Fwhere
T: ConvertFrom<F>,
impl<F, T> ConvertInto<T> for Fwhere
T: ConvertFrom<F>,
Source§fn convert_into(self) -> T
fn convert_into(self) -> T
Infallibly converts a value of type
Self to a value of type T.Source§impl<F, T> ConvertTryFrom<F> for Twhere
F: ConvertInto<T>,
impl<F, T> ConvertTryFrom<F> for Twhere
F: ConvertInto<T>,
Source§impl<F, T> ConvertTryInto<T> for Fwhere
T: ConvertTryFrom<F>,
impl<F, T> ConvertTryInto<T> for Fwhere
T: ConvertTryFrom<F>,
Source§type Error = <T as ConvertTryFrom<F>>::Error
type Error = <T as ConvertTryFrom<F>>::Error
The type of an error that can occur during a conversion. Read more
Source§fn convert_try_into(self) -> Result<T, <T as ConvertTryFrom<F>>::Error>
fn convert_try_into(self) -> Result<T, <T as ConvertTryFrom<F>>::Error>
Fallibly converts a value of type
Self to a value of type T.impl<T> DeserializeOwned for Twhere
T: for<'de> Deserialize<'de>,
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§impl<Q, K> Equivalent<K> for Q
impl<Q, K> Equivalent<K> for Q
Source§fn equivalent(&self, key: &K) -> bool
fn equivalent(&self, key: &K) -> bool
Compare self to
key and return true if they are equal.impl<T> ErasedDestructor for Twhere
T: 'static,
Source§impl<T> Instrument for T
impl<T> Instrument for T
Source§fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
fn instrument(self, span: Span) -> Instrumented<Self> ⓘ
Source§fn in_current_span(self) -> Instrumented<Self> ⓘ
fn in_current_span(self) -> Instrumented<Self> ⓘ
Source§impl<T> IntoEither for T
impl<T> IntoEither for T
Source§fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ
Converts
self into a Left variant of Either<Self, Self>
if into_left is true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read moreSource§fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
Converts
self into a Left variant of Either<Self, Self>
if into_left(&self) returns true.
Converts self into a Right variant of Either<Self, Self>
otherwise. Read more