Enum RootAccessError 

pub enum RootAccessError {
    Resolve {
        source: Box<RunnerRootError>,
    },
    Identity {
        source: Error,
    },
    BroadExistingAccess {
        path: PathBuf,
        dacl: String,
        volume: PathBuf,
        remediation: String,
    },
    Create {
        path: PathBuf,
        source: Error,
        remediation: String,
    },
    Inspect {
        path: PathBuf,
        source: Error,
        remediation: String,
    },
    Apply {
        path: PathBuf,
        source: Error,
        remediation: String,
    },
}

Why the default runner root could not be created, inspected, or reconciled.

Every variant is printed straight at an operator, so each says what to do next. None carries an account SID: a message an operator pastes into an issue should not be the thing that publishes their machine’s identifiers, which is what redact is applied for before a descriptor reaches one of these.

Variants

Resolve

The default root could not be resolved, or failed b1’s preflight.

Fields

source: Box<RunnerRootError>

What b1 reported.

Identity

This process’s own account could not be identified.

Fields

source: Error

What reading the process token reported.

BroadExistingAccess

The root already exists and is open to ordinary local users.

The refusal is the point. Tightening the directory instead would silently adopt whatever is already inside one that any local account could have created and filled, and a runner root’s contents are executed.

Fields

path: PathBuf

The root.

dacl: String

Its DACL, in SDDL, with account SIDs redacted.

volume: PathBuf

The volume the inherited grant would have come from.

remediation: String

The command that configures a different root.

Create

The root does not exist and could not be created.

Fields

path: PathBuf

The root.

source: Error

What the operating system reported.

remediation: String

The command that configures a different root.

Inspect

The root exists but its access control could not be read.

Fields

path: PathBuf

The root.

source: Error

What the operating system reported.

remediation: String

The command that configures a different root.

Apply

The root exists and is not open, but could not be reconciled.

Fields

path: PathBuf

The root.

source: Error

What the operating system reported.

remediation: String

The command that configures a different root.

Implementations

impl RootAccessError

pub fn path(&self) -> Option<&Path>

The root the failure is about, when it is about one.

Trait Implementations

impl Debug for RootAccessError

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for RootAccessError

fn fmt(&self, __formatter: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Error for RootAccessError

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.