Enum ServiceAccount 

pub enum ServiceAccount {
    LocalSystem,
    Root,
    InvokingUser,
}

The account a registration runs under.

Not an operator choice. It is a function of the start mode and the platform, because the start mode decides which secret store the daemon must read and the store’s own access control decides which accounts can read it. See docs/service-account.md, and review_least_privilege for the check.

Variants

LocalSystem

NT AUTHORITY\SYSTEM. The only stock Windows account named by the machine-scoped store’s DACL.

Root

root. What a LaunchDaemon and a systemd system unit run as, and what the macOS System Keychain’s root-only master key requires.

InvokingUser

The operator’s own account, for a login-mode registration.

Implementations

impl ServiceAccount

pub const fn for_definition(kind: DefinitionKind, mode: StartMode) -> Self

The account a given kind of definition obliges.

Keyed on the definition rather than on cfg!(windows), and the difference is not academic: a Windows developer rendering the launchd property list would otherwise write UserName = NT AUTHORITY\SYSTEM into it, which is not an account macOS has. A definition’s account is a property of the definition, and the whole point of rendering being pure is that any host can render any platform’s and get the right answer.

pub const fn for_start_mode(mode: StartMode) -> Self

The account the given start mode obliges on the platform this binary was built for.

pub const fn as_str(&self) -> &'static str

How the platform spells it.

pub const fn justification(&self) -> &'static str

Why this is the minimum account that can do the job, not merely the convenient one.

Printed by service status and by review_least_privilege, because a privileged account with no stated reason is indistinguishable from a privileged account nobody thought about.

pub const fn needs_elevation(&self) -> bool

Whether registering under this account needs administrative rights.

Trait Implementations

impl Clone for ServiceAccount

fn clone(&self) -> ServiceAccount

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ServiceAccount

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ServiceAccount

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for ServiceAccount

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for ServiceAccount

impl PartialEq for ServiceAccount

fn eq(&self, other: &ServiceAccount) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for ServiceAccount

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ServiceAccount