Struct OverlayRules 

pub struct OverlayRules {
    pub handled: u64,
    pub file_rights: u64,
    pub outside: Vec<(OwnedFd, u64)>,
    pub workspace: u64,
    pub inside: Vec<(PathBuf, u64, bool)>,
}

A Landlock rule set to build in a command’s namespace. Paths outside the workspace, which the overlay leaves as they are, are opened beforehand; those in it are opened there, as the overlay’s.

Fields

handled: u64

The rights the rule set handles, and those that apply to a file.

file_rights: u64

outside: Vec<(OwnedFd, u64)>

Opened outside the namespace: descriptors, held open until the task ends, with the rights beneath each.

workspace: u64

The rights everywhere in the workspace, where writes reach the overlay and are judged as the task ends.

inside: Vec<(PathBuf, u64, bool)>

Paths in the workspace with the rights beneath each, and whether to reach it through no link.

Trait Implementations

impl Debug for OverlayRules

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for OverlayRules

fn default() -> Self

Returns the “default value” for a type.