Enum ObservationCapability 

pub enum ObservationCapability {
    ProcessSpawnLineage,
    ProcessExecOccurrence,
    ProcessExecPathIdentity,
    ProcessExit,
    PathAccessIntent,
    SuccessfulOpenFdIdentity,
    OpenPathIdentity,
    FdReadWriteEffect,
    FdDupCloseLifecycle,
    ForkFdInheritance,
    CloseOnExec,
    RenameDeleteEffects,
    NetworkConnectDestination,
    TraceTimeRelativePath,
    CausalExecutableChain,
    LossTruncationVisibility,
}

Typed observation capability vocabulary introduced by M8.3.

Occurrence and path-identity capabilities are deliberately separate. A backend that can prove that an exec/open happened must not thereby claim it established the path required by the existing ExecSurface raw model.

Variants

ProcessSpawnLineage

ProcessExecOccurrence

ProcessExecPathIdentity

ProcessExit

PathAccessIntent

SuccessfulOpenFdIdentity

OpenPathIdentity

FdReadWriteEffect

FdDupCloseLifecycle

ForkFdInheritance

CloseOnExec

RenameDeleteEffects

NetworkConnectDestination

TraceTimeRelativePath

CausalExecutableChain

LossTruncationVisibility

Trait Implementations

impl Clone for ObservationCapability

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ObservationCapability

impl Debug for ObservationCapability

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ObservationCapability

impl Ord for ObservationCapability

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for ObservationCapability

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for ObservationCapability

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for ObservationCapability