Enum Guarantee 

pub enum Guarantee {
    Filesystem,
    Network,
    ProcessTree,
    User,
    Resources,
}

One axis a confinement arm can promise, or refuse to promise.

Variants

Filesystem

Writes through the working directory land on a copy; the tree the person has stays as it is.

Network

The command cannot open a network connection.

ProcessTree

The whole process tree ends when the command ends.

User

The command runs with an identity of its own.

Resources

CPU and memory ceilings are enforced, not merely asked for.

Implementations

impl Guarantee

pub const ALL: [Guarantee; 5]

Every axis, in the order a report lists them.

pub fn phrase(self) -> &'static str

What holding this axis means, in the words a sentence shown to a caller may use.

pub fn unkept(self) -> &'static str

What not holding it means, as the thing the caller does not get. Stated as a missing capability rather than as an absence, because the list it lands in is a list of what is not bought.

Trait Implementations

impl Clone for Guarantee

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Guarantee

impl Debug for Guarantee

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Guarantee

impl Ord for Guarantee

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

fn clamp_to<R>(self, range: R) -> Self

where Self: Sized, R: ClampBounds<Self>,

🔬This is a nightly-only experimental API. (clamp_to)

Restrict a value to a certain range.

impl PartialEq for Guarantee

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Guarantee

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for Guarantee