whyno-core 0.5.0

Permission check pipeline, fix engine, and state types
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107

use super::*;

// is_metadata — true for all new metadata variants
#[test]
fn is_metadata_true_for_chmod() {
    assert!(Operation::Chmod.is_metadata());
}
#[test]
fn is_metadata_true_for_chown_uid() {
    assert!(Operation::ChownUid.is_metadata());
}
#[test]
fn is_metadata_true_for_chown_gid() {
    assert!(Operation::ChownGid.is_metadata());
}
#[test]
fn is_metadata_true_for_setxattr_user() {
    assert!(Operation::SetXattr {
        namespace: XattrNamespace::User
    }
    .is_metadata());
}
#[test]
fn is_metadata_true_for_setxattr_trusted() {
    assert!(Operation::SetXattr {
        namespace: XattrNamespace::Trusted
    }
    .is_metadata());
}
#[test]
fn is_metadata_true_for_setxattr_security() {
    assert!(Operation::SetXattr {
        namespace: XattrNamespace::Security
    }
    .is_metadata());
}
#[test]
fn is_metadata_true_for_setxattr_system_posix_acl() {
    assert!(Operation::SetXattr {
        namespace: XattrNamespace::SystemPosixAcl
    }
    .is_metadata());
}

// is_metadata — false for all existing variants
#[test]
fn is_metadata_false_for_read() {
    assert!(!Operation::Read.is_metadata());
}
#[test]
fn is_metadata_false_for_write() {
    assert!(!Operation::Write.is_metadata());
}
#[test]
fn is_metadata_false_for_execute() {
    assert!(!Operation::Execute.is_metadata());
}
#[test]
fn is_metadata_false_for_delete() {
    assert!(!Operation::Delete.is_metadata());
}
#[test]
fn is_metadata_false_for_create() {
    assert!(!Operation::Create.is_metadata());
}
#[test]
fn is_metadata_false_for_stat() {
    assert!(!Operation::Stat.is_metadata());
}

// checks_parent unaffected by new variants
#[test]
fn checks_parent_false_for_chmod() {
    assert!(!Operation::Chmod.checks_parent());
}
#[test]
fn checks_parent_false_for_chown_uid() {
    assert!(!Operation::ChownUid.checks_parent());
}
#[test]
fn checks_parent_false_for_chown_gid() {
    assert!(!Operation::ChownGid.checks_parent());
}
#[test]
fn checks_parent_false_for_setxattr() {
    assert!(!Operation::SetXattr {
        namespace: XattrNamespace::User
    }
    .checks_parent());
}

// MetadataParams
#[test]
fn metadata_params_all_none_by_default() {
    let p = MetadataParams::default();
    assert!(p.new_mode.is_none());
    assert!(p.new_uid.is_none());
    assert!(p.new_gid.is_none());
}

// XattrNamespace is Copy
#[test]
fn xattr_namespace_is_copy() {
    let ns = XattrNamespace::User;
    // Using ns twice proves Copy — would fail to compile if not Copy.
    assert_eq!(ns, ns);
}