Struct FilesystemBoundaryReport 

pub struct FilesystemBoundaryReport {
    pub restriction: FilesystemRestriction,
    pub not_protected: Vec<String>,
}

What the filesystem mechanism this session installs does not protect, in words an operator can act on.

The counterpart to every grant beside it in a ScopeReport: those say what the capsule may reach, and this says which of the restrictions an operator would read into them are not there.

Self::not_protected is non-empty below FilesystemRestriction::Absent, and empty at it unless the runtime directory lies inside the workdir. It is serialized either way — an absent key identifies a runtime that predates the field, never a capsule with nothing to disclaim.

Fields

restriction: FilesystemRestriction

What the session’s filesystem mechanism restricts.

not_protected: Vec<String>

One statement per protection an operator would otherwise assume, the runtime directory’s RuntimeDirReport::not_protected_because among them when it is set. Rendered verbatim under Not protected here, so the JSON and the human report cannot word the same disclaimer differently.

Trait Implementations

impl Clone for FilesystemBoundaryReport

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FilesystemBoundaryReport

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for FilesystemBoundaryReport

impl PartialEq for FilesystemBoundaryReport

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for FilesystemBoundaryReport

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for FilesystemBoundaryReport