Struct Policy 

pub struct Policy { /* private fields */ }

A file-configured admission hook. Line format (# starts a comment):

default deny            # decision when no rule matches (required)
allow capture           # any capture
allow input click       # only click among input effects
deny * *                # explicit catch-all

Kinds: navigate input action script capture process command or *. The first matching rule wins; otherwise default decides. A policy with no default line is rejected, so there is no implicit allow.

Implementations

impl Policy

pub fn parse(text: &str) -> Result<Self, String>

pub fn load(path: &Path) -> Result<Self, String>

Trait Implementations

impl AdmissionHook for Policy

fn approve(&self, r: &EffectRequest) -> AdmissionDecision

Approve or deny. Called only after validation passed.

fn validate(&self, _request: &EffectRequest) -> Result<(), String>

Structural validation before approval. Default accepts.

impl Clone for Policy

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Policy

impl PartialEq for Policy

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Policy