Struct SealedShortfall 

pub struct SealedShortfall {
    pub blocker: SealedBlocker,
    pub failed_call: Option<String>,
    pub errno: Option<i32>,
    pub userns_grant: UsernsGrant,
    pub attachment: ProfileAttachment,
    pub profile_gap: ProfileGap,
}

Why this host cannot back sealed: the blocker, and, when a probe attempt failed, the call it saw fail and the readings the refusal is worded with.

Self::reason is the text under E-CAP-003 for sealed, so the floor refusal, --explain-scope and mur doctor cannot explain one host two ways.

Fields

blocker: SealedBlocker

Decided by the attempts and Landlock alone; the readings below never change whether there is a shortfall.

failed_call: Option<String>

The probe’s call that failed, in its step’s words (unshare(CLONE_NEWUSER | CLONE_NEWNET), pivot_root(2), …), or, for SealedBlocker::ProbeUnavailable, the runtime’s account of why the probe could not run. None when no attempt failed: SealedBlocker::NotLinux and SealedBlocker::LandlockUnavailable.

errno: Option<i32>

The errno the failed call left. None when no call failed, and for SealedBlocker::ProbeUnavailable.

userns_grant: UsernsGrant

AppArmor’s unprivileged-userns restriction as read with the attempts.

attachment: ProfileAttachment

The profile the kernel reports as confining this process, read with the attempts.

profile_gap: ProfileGap

Why no mur-sealed profile confines this process, read with the attempts. Words the remedy of SealedBlocker::AppArmorProfileMissing; decides nothing.

Implementations

impl SealedShortfall

pub fn reason(&self) -> String

SealedBlocker::reason; then, when an attempt failed, The probe's <call> failed with <ERRNO> (<words>). (or The probe could not run: <account>.); then, last, the same Host readings: … line E-CAP-005 ends with.

For SealedBlocker::AppArmorProfileMissing with a ProfileGap other than ProfileGap::Undetermined, the blocker’s generic remedy is replaced by profile_gap_remedy for that gap, the text E-CAP-005 names it with.

Trait Implementations

impl Clone for SealedShortfall

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SealedShortfall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SealedShortfall

impl PartialEq for SealedShortfall

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SealedShortfall