Enum Enforcement 

pub enum Enforcement {
    Kernel,
    Interposed,
    None,
}

How strongly a tier confines one resource domain.

Named here for the same reason Tier is: a tier reports one, the runtime carries it, and a ledger entry records it, so the vocabulary belongs to the crate none of the three can avoid depending on.

Why the honest answer has three values

Enforcement::Kernel and Enforcement::None are the easy cases. The interesting one is Enforcement::Interposed: the host stands between the tool and the resource, which is real enforcement for everything that goes through the handle it was given, and no enforcement at all against a tool that makes its own syscall. An in-process tool is in exactly that position.

Collapsing that into “enforced” would be a lie and collapsing it into “not enforced” would make the in-process tier unusable, so it is its own value and the caller decides what it is worth. Profile C decides it is worth nothing.

Variants

Kernel

The kernel refuses. A tool cannot exceed it whatever it does.

Interposed

The host stands in the way.

Real for everything reached through the handle the tool was given, and worth nothing against a tool that makes its own syscall. See the type documentation on why this is its own value rather than rounded to one of the other two.

None

Not enforced. A tier reporting this for a domain must refuse any capability set that touches it.

Implementations

impl Enforcement

pub const ALL: [Self; 3]

Every grade, strongest first.

pub const fn permits_grants(self) -> bool

Whether a grant in this domain can be handed out at all.

pub const fn name(self) -> &'static str

The name used in a report and in a ledger entry.

pub const fn describe(self) -> &'static str

How it reads in a diagnostic.

Trait Implementations

impl Clone for Enforcement

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Enforcement

impl Debug for Enforcement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Enforcement

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Enforcement

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Enforcement

impl Hash for Enforcement

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Enforcement

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for Enforcement

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Enforcement

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for Enforcement

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Enforcement