linux-support 0.0.25

Comprehensive Linux support for namespaces, cgroups, processes, scheduling, parsing /proc, parsing /sys, signals, hyper threads, CPUS, NUMA nodes, unusual file descriptors, PCI devices and much, much more
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

// This file is part of linux-support. It is subject to the license terms in the COPYRIGHT file found in the top-level directory of this distribution and at https://raw.githubusercontent.com/lemonrock/linux-support/master/COPYRIGHT. No part of linux-support, including this file, may be copied, modified, propagated, or distributed except according to the terms contained in the COPYRIGHT file.
// Copyright © 2020 The developers of linux-support. See the COPYRIGHT file in the top-level directory of this distribution and at https://raw.githubusercontent.com/lemonrock/linux-support/master/COPYRIGHT.


/// Global security configuration error kind.
#[derive(Debug)]
pub enum GlobalSecurityConfigurationError
{
	#[allow(missing_docs)]
	CouldNotHarden
	{
		proc_sys_kernel_file: &'static str,
		cause: io::Error,
	},
	
	#[allow(missing_docs)]
	CouldNotSetMaximumProcessIdentifiersToMaximum(io::Error),

	#[allow(missing_docs)]
	CouldNotSetMaximumNumberOfFileSystemMounts(io::Error),

	#[allow(missing_docs)]
	CouldNotSetMaximumNumberOfMemoryMapsPerProcess(io::Error),

	#[allow(missing_docs)]
	CouldNotHardenJitOfBpfPrograms(io::Error),

	#[allow(missing_docs)]
	CouldNotDisableKexecLoadingUntilNextReboot(io::Error),

	#[allow(missing_docs)]
	CouldNotDisableBpfLoadingOfProgramsByUnprivilegedUsersUntilNextReboot(io::Error),
	
	#[allow(missing_docs)]
	CouldNotChangeLockDownState(io::Error),
}

impl Display for GlobalSecurityConfigurationError
{
	#[inline(always)]
	fn fmt(&self, f: &mut Formatter) -> fmt::Result
	{
		Debug::fmt(self, f)
	}
}

impl error::Error for GlobalSecurityConfigurationError
{
	#[inline(always)]
	fn source(&self) -> Option<&(dyn error::Error + 'static)>
	{
		use self::GlobalSecurityConfigurationError::*;

		match self
		{
			&CouldNotHarden { ref cause, .. } => Some(cause),
			
			&CouldNotSetMaximumProcessIdentifiersToMaximum(ref cause) => Some(cause),
			
			&CouldNotSetMaximumNumberOfFileSystemMounts(ref cause) => Some(cause),
			
			&CouldNotSetMaximumNumberOfMemoryMapsPerProcess(ref cause) => Some(cause),
			
			&CouldNotHardenJitOfBpfPrograms(ref cause) => Some(cause),
			
			&CouldNotDisableKexecLoadingUntilNextReboot(ref cause) => Some(cause),
			
			&CouldNotDisableBpfLoadingOfProgramsByUnprivilegedUsersUntilNextReboot(ref cause) => Some(cause),
			
			&CouldNotChangeLockDownState(ref cause) => Some(cause),
		}
	}
}