Struct LandlockPolicy 

pub struct LandlockPolicy {
    pub min_abi: u8,
    pub rules: Vec<LandlockRule>,
}

Parsed Landlock policy from a TOML file.

Fields

min_abi: u8

Minimum required ABI version (1-5). Default: 3.

rules: Vec<LandlockRule>

Filesystem access rules.

Implementations

impl LandlockPolicy

pub fn validate_production(&self) -> Result<()>

Validate the policy for production safety.

Rejects rules that grant both write and execute on the same path, as this enables drop-and-exec attacks.

pub fn apply(&self, best_effort: bool) -> Result<bool>

Apply this policy, replacing the default hardcoded Landlock rules.

Returns true if the policy was enforced (fully or partially), false if not enforced (kernel too old).

Trait Implementations

impl Clone for LandlockPolicy

fn clone(&self) -> LandlockPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LandlockPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for LandlockPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.