Enum SandboxDenialClass 

pub enum SandboxDenialClass {
    FilesystemRead,
    FilesystemWrite,
    ProcessStartup,
    RegistryAccess,
    IpcAccess,
    ProcessAccess,
    JobAccess,
    UiAccess,
    ServiceAccess,
    NetworkOutbound,
    NetworkLocal,
    NetworkHost,
    OtherAccess,
    Unknown,
}

Bounded class of access an enforcement check refused. Raw resources, commands, and process names accompany it only when content capture is enabled; diagnostic text and matched rules are never exported.

Variants

FilesystemRead

A read was refused because the effective policy does not grant it.

FilesystemWrite

A write was refused. Distinct from filesystem_read because a read-only grant denies writes to a path it otherwise permits.

ProcessStartup

A process could not start because the sandbox refused a required process-scoped resource. Currently emitted for the Windows MSYS BaseNamedObjects fork failure confirmed by learning-mode capture.

RegistryAccess

Windows registry access was refused and correlated with capture evidence.

IpcAccess

Windows ALPC or RPC access was refused and correlated with capture evidence.

ProcessAccess

Access to another Windows process was refused and correlated with capture evidence.

JobAccess

Windows job-object access was refused and correlated with capture evidence.

UiAccess

Windows UI-handle access was refused and correlated with capture evidence.

ServiceAccess

Windows service-control-manager access was refused and correlated with capture evidence.

NetworkOutbound

An outbound connection was refused by network.allowOutbound.

NetworkLocal

A connection to a local or loopback destination was refused by network.allowLocalNetwork.

NetworkHost

A destination was refused by the sandbox host allow/deny rules.

OtherAccess

The sandbox’s denial capture recorded a refusal its record does not attribute to a more specific control: an unclassified resource (registry, COM, section object) or an AppContainer capability with no network meaning. Deliberately generic — the capture proves the denial happened, and naming a narrower class than the record supports would be a guess.

Unknown

Unknown variant for forward compatibility.

Trait Implementations

impl Clone for SandboxDenialClass

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SandboxDenialClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SandboxDenialClass

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SandboxDenialClass

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for SandboxDenialClass

impl PartialEq for SandboxDenialClass

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for SandboxDenialClass

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for SandboxDenialClass