Enum EnvelopeAxis

Source

pub enum EnvelopeAxis {
Show 13 variants    NetworkAllow,
    UnixSockets,
    PeerFetchAllow,
    ShellAllow,
    SpawnAllow,
    EnvAllow,
    FilesystemScope,
    WorkdirExec,
    StateStore,
    InstallSkill,
    InstallTool,
    InstallFrom,
    Containment,
}

Expand description

Every axis two capsules are compared on, and the manifest key each one renders as in a refusal.

One variant per declaration site, not per lowered field: unix_sockets and workdir_exec are separate axes from the allow-list and the scope they are declared beside, because each is a real widening on its own. unix_sockets: true reaches a local daemon socket the parent cannot, and workdir_exec: true makes capabilities.shell.allow unenforceable for anything inside the workdir. Comparing the list while ignoring the boolean beside it would make the axis hollow.

Variants§

§

Enum EnvelopeAxis Copy item path

Variants§

NetworkAllow

UnixSockets

PeerFetchAllow

ShellAllow

SpawnAllow

EnvAllow

FilesystemScope

WorkdirExec

StateStore

InstallSkill

InstallTool

InstallFrom

Containment

Implementations§

impl EnvelopeAxis

pub fn manifest_key(self) -> &'static str

Trait Implementations§

impl Clone for EnvelopeAxis

fn clone(&self) -> Self

fn clone_from(&mut self, source: &Self)

impl Copy for EnvelopeAxis

impl Debug for EnvelopeAxis

fn fmt(&self, f: &mut Formatter<'_>) -> Result

impl Eq for EnvelopeAxis

impl PartialEq for EnvelopeAxis

fn eq(&self, other: &Self) -> bool

fn ne(&self, other: &Rhs) -> bool

impl StructuralPartialEq for EnvelopeAxis

Auto Trait Implementations§

impl Freeze for EnvelopeAxis

impl RefUnwindSafe for EnvelopeAxis

impl Send for EnvelopeAxis

impl Sync for EnvelopeAxis

impl Unpin for EnvelopeAxis

impl UnsafeUnpin for EnvelopeAxis

impl UnwindSafe for EnvelopeAxis

Blanket Implementations§

impl<T> Any for Twhere T: 'static + ?Sized,

fn type_id(&self) -> TypeId

impl<T> Borrow<T> for Twhere T: ?Sized,

fn borrow(&self) -> &T

impl<T> BorrowMut<T> for Twhere T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

impl<T> CloneToUninit for Twhere T: Clone,

unsafe fn clone_to_uninit(&self, dest: *mut u8)

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<Q, K> Equivalent<K> for Qwhere Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

fn equivalent(&self, key: &K) -> bool

impl<T> From<T> for T

fn from(t: T) -> T

impl<T> Instrument for T

fn instrument(self, span: Span) -> Instrumented<Self> ⓘ

fn in_current_span(self) -> Instrumented<Self> ⓘ

impl<T, U> Into<U> for Twhere U: From<T>,

fn into(self) -> U

impl<T> IntoEither for T

fn into_either(self, into_left: bool) -> Either<Self, Self> ⓘ

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘwhere F: FnOnce(&Self) -> bool,

impl<T> Pointable for T

const ALIGN: usize

type Init = T

unsafe fn init(init: <T as Pointable>::Init) -> usize

unsafe fn deref<'a>(ptr: usize) -> &'a T

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

unsafe fn drop(ptr: usize)

impl<T> Same for T

type Output = T

impl<T> ToOwned for Twhere T: Clone,

type Owned = T

fn to_owned(&self) -> T

fn clone_into(&self, target: &mut T)

impl<T, U> TryFrom<U> for Twhere U: Into<T>,

type Error = !

fn try_from(value: U) -> Result<T, !>

impl<T, U> TryInto<U> for Twhere U: TryFrom<T>,

Enum EnvelopeAxis

impl<T> Any for T
where T: 'static + ?Sized,

impl<T> Borrow<T> for T
where T: ?Sized,

impl<T> BorrowMut<T> for T
where T: ?Sized,

impl<T> CloneToUninit for T
where T: Clone,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

impl<Q, K> Equivalent<K> for Q
where Q: Eq + ?Sized, K: Borrow<Q> + ?Sized,

impl<T, U> Into<U> for T
where U: From<T>,

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self> ⓘ
where F: FnOnce(&Self) -> bool,

impl<T> ToOwned for T
where T: Clone,

impl<T, U> TryFrom<U> for T
where U: Into<T>,

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> ⓘ
where S: Into<Dispatch>,