Enum ProfileAttachment 

pub enum ProfileAttachment {
    Sealed {
        profile: String,
    },
    Other {
        profile: String,
    },
    Unconfined,
    NotReported,
}

Which AppArmor profile, if any, the kernel reports as confining this process.

AppArmor attaches profiles by executable path, so a mur at a bind mount, a build output or a test fixture gets no profile however correctly the shipped one is installed. That is invisible in UsernsGrant alone — it reports UsernsGrant::Withheld identically for “the profile is not installed” and “the profile is installed and does not attach here” — which is why this is reported beside it rather than folded into it.

Variants

Sealed

A profile whose name begins with SEALED_APPARMOR_PROFILE_NAME confines this process — the shipped profile, or the checkout profile scripts/install-dev-apparmor.sh generates. The same condition UsernsGrant::ProfileConfining is decided on.

Fields

profile: String

The profile name as the kernel reports it, without the trailing enforcement mode.

Other

Some other profile confines this process. It grants nothing murmur asked for, and it may be narrower than unconfined — a snap or a container runtime profile, for instance.

Fields

profile: String

The profile name as the kernel reports it, without the trailing enforcement mode.

Unconfined

The kernel reports unconfined: AppArmor is present and no profile attaches to this binary’s path.

NotReported

/proc/self/attr/current is absent or unreadable — no AppArmor on this host, or not Linux. Never collapsed into Self::Unconfined, on the same terms InstalledProfileState::Unreadable is kept apart from InstalledProfileState::Absent: “nothing attaches” and “I could not look” are different findings.

Trait Implementations

impl Clone for ProfileAttachment

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProfileAttachment

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ProfileAttachment

impl PartialEq for ProfileAttachment

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ProfileAttachment