Enum ExecutableIdentityPolicy 

pub enum ExecutableIdentityPolicy {
    ExactOpenedFile,
}

Required executable-identity policy for an owned helper launch.

Variants

ExactOpenedFile

Open and retain one absolute regular executable without any symlink traversal and apply the target’s documented image-identity checks. Linux executes the held object directly. macOS authenticates the running image against the retained file by content: the kernel- registered code-directory hash of the exact audit-token-bound child execution must match a hash computed from the held descriptor, at launch and again through ACCEPT, independent of pathnames and of the signing identity (an ad-hoc linker signature suffices). A macOS executable that carries no code directory — an unsigned image or a script — cannot be bound and fails construction closed. Windows retains the opened file, spawns from the retained image, binds the session transport to the exact spawned process identity, and holds the child and its descendants in a kill-on-close Job.

Trait Implementations

impl Clone for ExecutableIdentityPolicy

fn clone(&self) -> ExecutableIdentityPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ExecutableIdentityPolicy

impl Debug for ExecutableIdentityPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ExecutableIdentityPolicy

impl PartialEq for ExecutableIdentityPolicy

fn eq(&self, other: &ExecutableIdentityPolicy) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for ExecutableIdentityPolicy