Struct SealedEtcPath 

pub struct SealedEtcPath {
    pub path: &'static str,
    pub directory: bool,
    pub synthetic: Option<SyntheticEtcFile>,
}

One entry of the fixed /etc allowlist: the host path to bind, plus whether it is a directory.

The directory bit exists because the same list drives two mechanisms with different needs. [plan_composed_root] does not need it — it asks the host what each path is via [HostLayout::kind] and mirrors accordingly. sandbox::resolve_sealed_etc_landlock_grants does: it must decide ReadDir per entry, and it is required to be pure and syscall-free (it runs on any platform, for paths that need not exist). Carrying the classification in the list rather than in a second parallel constant is what makes the bound set and the granted set structurally incapable of drifting apart — the same reason SealedDevice carries its own writable bit rather than deriving it from a separate table.

It is a static claim about mainstream Linux, not a fact read off this host: /etc/ssl and friends are directories on Debian, Ubuntu, Fedora, RHEL, Arch and Alpine alike. A host that disagrees costs the entry its enumerability and nothing else — open_landlock_fds narrows list_dir back to false for anything that does not fstat as a directory, because the kernel rejects (EINVAL) a ReadDir rule on a non-directory and that would otherwise refuse the whole launch.

Fields

path: &'static str

Absolute path inside the composed root. Also the host path bind-mounted there, except for an entry carrying Self::synthetic, whose content the parent writes itself.

directory: bool

Whether this path is a directory on a mainstream Linux host, and therefore whether its Landlock rule carries ReadDir. false for regular files and for symlinks (the symlink is followed when the rule’s fd is opened, so /etc/localtime’s rule lands on the zoneinfo file it points at).

synthetic: Option<SyntheticEtcFile>

Some when Self::path is backed by a file the parent synthesises rather than by the host’s own file at that path — the account databases, and nothing else.

Carried on the entry for the same reason as directory: the alternative is a second parallel list of “the ones we do not mirror”, which is free to drift out of step with this one. Typed rather than a bool so the content each synthetic entry gets is decided by an exhaustive match — adding a third one is then a compile error until it is given content, instead of a launch-time failure to bind a file nobody wrote.

Trait Implementations

impl Clone for SealedEtcPath

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SealedEtcPath

impl Debug for SealedEtcPath

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SealedEtcPath

impl PartialEq for SealedEtcPath

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SealedEtcPath