Struct CapabilityProbe 

pub struct CapabilityProbe;

Stub capability-denial probe.

poll always returns an empty vector. The real implementation will either:

1. open a netlink audit socket (NETLINK_AUDIT) with a per-cell filter, OR
2. read from a /sys/kernel/debug/tracing/events/capable/ pipe (debugfs is post-1.0 per ADR-0006 §5.8).

TODO syscall surface — wire one of (1) or (2) under the Path C deferral.

Implementations

impl CapabilityProbe

pub fn new() -> Self

Construct the stub probe.

pub fn poll(&mut self) -> Vec<ProbeEvent>

Poll for capability denials. Currently a no-op.

Trait Implementations

impl Debug for CapabilityProbe

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CapabilityProbe

fn default() -> CapabilityProbe

Returns the “default value” for a type.