Enum InstalledProfileState 

pub enum InstalledProfileState {
    Matches,
    Drifted {
        installed_sha256: String,
    },
    Absent,
    Unreadable {
        error: String,
    },
}

How /etc/apparmor.d/mur-sealed on this host compares to the profile this build ships.

A file-level finding and deliberately nothing more. AppArmor loads profiles from the kernel’s own policy cache, not from this path at call time, so a file can be edited without apparmor_parser -r ever running and a profile can be loaded from a file that has since been deleted. UsernsGrant is the behavioural answer and stays the source of truth; this only tells an operator whether the bytes on disk are the bytes murmur ships.

Variants

Matches

The installed file hashes to SEALED_APPARMOR_PROFILE_SHA256.

Drifted

The file is present and hashes to something else — an older revision, or an edited copy. Operator customisation belongs in /etc/apparmor.d/local/mur-sealed, which both shipped profiles include if exists and which is not hashed here.

Fields

installed_sha256: String

Lowercase hex SHA-256 of the bytes actually on disk.

Absent

No file at SEALED_APPARMOR_PROFILE_PATH. Expected on a host without AppArmor, and on a checkout build using scripts/install-dev-apparmor.sh, which writes its own separate file.

Unreadable

The path exists and could not be read — a permission or I/O error, kept apart from Self::Absent so “I could not look” never reads as “it is not there”.

Fields

error: String

The std::io::Error, rendered.

Trait Implementations

impl Clone for InstalledProfileState

fn clone(&self) -> InstalledProfileState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for InstalledProfileState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for InstalledProfileState

impl PartialEq for InstalledProfileState

fn eq(&self, other: &InstalledProfileState) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for InstalledProfileState