Enum SecurityState 

pub enum SecurityState {
    Privileged,
    CapabilitiesDropped,
    SeccompApplied,
    LandlockApplied,
    Locked,
}

Security state machine matching Nucleus_Security_SecurityEnforcement.tla

State transitions: privileged -> capabilities_dropped -> seccomp_applied -> landlock_applied -> locked

Properties verified by TLA+ model:

• irreversible_lockdown: Once security layers are applied, can only move forward to locked
• defense_in_depth: Locked state requires capabilities dropped, seccomp applied, and landlock applied
• no_privilege_escalation: Cannot return to privileged state after dropping capabilities

Variants

Privileged

Initial state with all privileges

CapabilitiesDropped

Capabilities have been dropped

SeccompApplied

Seccomp filter has been applied

LandlockApplied

Landlock filesystem policy has been applied

Locked

Final locked state - no further security changes possible

Trait Implementations

impl Clone for SecurityState

fn clone(&self) -> SecurityState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SecurityState

fn eq(&self, other: &SecurityState) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StateTransition for SecurityState

fn can_transition_to(&self, next: &SecurityState) -> bool

Return true if moving from self to next is a valid transition.

fn is_terminal(&self) -> bool

Return true if this state is terminal (no forward transitions).

fn transition(self, next: Self) -> Result<Self>

Attempt to transition, returning Err(InvalidStateTransition) on failure.

impl Copy for SecurityState

impl Eq for SecurityState

impl StructuralPartialEq for SecurityState