Struct Protection 

pub struct Protection { /* private fields */ }

What actually stands between the stored value and an ordinary local user.

The three operating systems protect it with three different mechanisms, so the useful cross-platform question is not “what is the mode” but “which object’s access control decides who can read this, and does it exclude an unprivileged local user”. Protection::guard answers the first half and Protection::readable_by_other_local_users the second.

store	guard
Windows, either scope	the file holding the DPAPI blob, whose DACL is protected and names no broad trustee
Linux, either scope	the 0600 file
macOS, login or rooted keychain	the keychain database file
macOS, System Keychain	/var/db/SystemKey, the root-only master key that unlocks it

That last row is the one worth reading twice. /Library/Keychains/System.keychain is itself world-readable, and saying so and stopping would be both true and useless: its contents are encrypted, and what decides who can decrypt them is the mode of the master key beside it. Reporting the keychain database there would answer a question nobody asked and would answer it wrongly.

Implementations

impl Protection

pub fn guard(&self) -> &Path

The filesystem object whose access control was inspected.

pub fn description(&self) -> &str

The platform’s own description of it — a Unix mode, or a DACL in SDDL form. For diagnostics and for test failure messages.

pub const fn readable_by_other_local_users(&self) -> bool

Whether an ordinary local user other than the owner could read the stored value.

A local administrator or root is deliberately outside this question; see this module’s documentation and 07-security.md.

Trait Implementations

impl Clone for Protection

fn clone(&self) -> Protection

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Protection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Protection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Protection

impl PartialEq for Protection

fn eq(&self, other: &Protection) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for Protection