Struct SanitizedMode 

pub struct SanitizedMode(/* private fields */);

A Unix permission mode that has already passed through [sanitize_permissions].

This newtype closes the gap between “a raw mode read from an archive header” and “a mode safe to apply to an extracted file”: both are otherwise a plain u32, so a caller could pass an unsanitized mode to permission-setting code by mistake, with the invariant living only in a doc comment. SanitizedMode can only be constructed by [sanitize_permissions] — its single field is private, so external callers (and other modules in this crate) cannot fabricate one that skipped the setuid/setgid/world-writable stripping.

Examples

use exarch_core::SecurityConfig;
use exarch_core::security::sanitize_permissions;

let config = SecurityConfig::default().validate()?;

// Setuid bit is stripped
let sanitized = sanitize_permissions(0o4755, &config);
assert_eq!(sanitized.as_u32(), 0o755);

Implementations

impl SanitizedMode

pub fn as_u32(self) -> u32

Returns the sanitized mode as a raw Unix permission bitmask.

Trait Implementations

impl Clone for SanitizedMode

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SanitizedMode

impl Debug for SanitizedMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SanitizedMode

impl PartialEq for SanitizedMode

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SanitizedMode