Struct FilesystemBoundaryReport 

pub struct FilesystemBoundaryReport {
    pub restriction: FilesystemRestriction,
    pub not_protected: Vec<String>,
}

What the filesystem mechanism this session installs does not protect, in words an operator can act on.

The counterpart to every grant beside it in a ScopeReport: those say what the capsule may reach, and this says which of the restrictions an operator would read into them are not there.

Self::not_protected is empty at FilesystemRestriction::Absent and non-empty below it. It is serialized either way — an absent key identifies a runtime that predates the field, never a capsule with nothing to disclaim.

Fields

restriction: FilesystemRestriction

What the session’s filesystem mechanism restricts.

not_protected: Vec<String>

One statement per protection an operator would otherwise assume, empty at FilesystemRestriction::Absent. Rendered verbatim under Not protected here, so the JSON and the human report cannot word the same disclaimer differently.

Trait Implementations

impl Clone for FilesystemBoundaryReport

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FilesystemBoundaryReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for FilesystemBoundaryReport

impl PartialEq for FilesystemBoundaryReport

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for FilesystemBoundaryReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FilesystemBoundaryReport