Enum DangerousCommandClass 

pub enum DangerousCommandClass {
    RecursiveDelete,
    DeviceWrite,
    ForkBomb,
    PipeToShell,
    SystemShutdown,
    PermissionEscalation,
    ProcessTermination,
    CredentialFileModification,
    DiskWipe,
    ReverseShell,
}

Classification of dangerous command patterns for exec mediation.

Each variant represents a class of commands that pose a security risk when executed by an extension. The classifier is deterministic: given the same command string, the same classification is always returned.

Variants

RecursiveDelete

Recursive deletion targeting root or broad paths (rm -rf /).

DeviceWrite

Device-level writes (dd, mkfs, fdisk).

ForkBomb

Fork bomb or process exhaustion patterns.

PipeToShell

Pipe to shell execution (curl | sh, wget | bash).

SystemShutdown

System shutdown or reboot commands.

PermissionEscalation

Broad permission changes (chmod 777, chmod -R 777).

ProcessTermination

Killing critical system processes (kill -9 1, pkill init).

CredentialFileModification

Modifying /etc/passwd, /etc/shadow, or sudoers.

DiskWipe

Disk wipe or overwrite patterns (shred, wipefs).

ReverseShell

Network exfiltration via raw sockets or reverse shells.

Implementations

impl DangerousCommandClass

pub const fn label(self) -> &'static str

Human-readable label for incident logging.

pub const fn risk_tier(self) -> ExecRiskTier

Risk tier for this command class (used for policy decisions).

Trait Implementations

impl Clone for DangerousCommandClass

fn clone(&self) -> DangerousCommandClass

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for DangerousCommandClass

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for DangerousCommandClass

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Hash for DangerousCommandClass

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for DangerousCommandClass

fn eq(&self, other: &DangerousCommandClass) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for DangerousCommandClass

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Copy for DangerousCommandClass

impl Eq for DangerousCommandClass

impl StructuralPartialEq for DangerousCommandClass