Struct AclBlob 

pub struct AclBlob {
    pub owner: AclEntry,
    pub entries: Vec<AclEntry>,
}

A public ACL blob.

Fields

owner: AclEntry

The first entry, followed by a count of the entries after it.

entries: Vec<AclEntry>

Implementations

impl AclBlob

pub fn for_item(name: &str) -> Self

The ACL macOS writes for an item created with “allow all applications”: an owner entry plus a decrypt entry and an item-operations entry.

pub fn for_item_trusting( name: &str, applications: Vec<TrustedApplication>, ) -> Self

The same three entries, restricted to specific applications.

macOS restricts the Authorization::ItemAccess entry and leaves the other open, which is what security add-generic-password -T writes. Putting the applications on the wrong entry yields an ACL that parses and looks restricted while granting the item to everyone.

pub fn for_item_with_subject(name: &str, subject: Subject) -> Self

Build the standard three entries with subject on the entry that governs use of the item.

pub fn trusted_paths(&self) -> Vec<&str>

Applications this ACL restricts the item to, across all of its entries.

pub fn parse(data: &[u8]) -> Result<Self>

pub fn to_bytes(&self) -> Vec<u8>

pub fn encoded_len(&self) -> usize

pub fn item_name(&self) -> Option<&str>

The name every entry refers to, when they agree.

Trait Implementations

impl Clone for AclBlob

fn clone(&self) -> AclBlob

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AclBlob

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for AclBlob

impl PartialEq for AclBlob

fn eq(&self, other: &AclBlob) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for AclBlob