pub struct OverlayRules {
pub handled: Rights,
pub outside: Vec<(OwnedFd, Rights)>,
pub workspace: Rights,
pub inside: Vec<(PathBuf, Rights, Open)>,
}Expand description
A Landlock rule set to build in a command’s namespace. Paths outside the workspace, which the overlay leaves as they are, are opened beforehand; those in it are opened there, as the overlay’s.
Fields§
§handled: RightsThe rights the rule set handles.
outside: Vec<(OwnedFd, Rights)>Opened outside the namespace: descriptors, held open until the task ends, with the rights beneath each.
workspace: RightsThe rights everywhere in the workspace, where writes reach the overlay and are judged as the task ends.
inside: Vec<(PathBuf, Rights, Open)>Paths in the workspace with the rights beneath each, and how each is opened.
Trait Implementations§
Source§impl Debug for OverlayRules
impl Debug for OverlayRules
Auto Trait Implementations§
impl Forget for OverlayRules
impl Freeze for OverlayRules
impl RefUnwindSafe for OverlayRules
impl Send for OverlayRules
impl Sync for OverlayRules
impl Unpin for OverlayRules
impl UnsafeUnpin for OverlayRules
impl UnwindSafe for OverlayRules
Blanket Implementations§
Source§impl<T> BorrowMut<T> for Twhere
T: ?Sized,
impl<T> BorrowMut<T> for Twhere
T: ?Sized,
Source§fn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more