Struct PrivilegeDrop 

pub struct PrivilegeDrop {
    pub chroot_dir: Option<PathBuf>,
    pub uid: Option<Uid>,
    pub gid: Option<Gid>,
}

Requested privilege drop.

All fields are optional — None / false means “no change” (back-compat).

Fields

chroot_dir: Option<PathBuf>

If Some, call chroot(dir) followed by chdir("/"). The directory becomes the filesystem root for all subsequent I/O.

uid: Option<Uid>

Target UID. None = don’t call setuid.

gid: Option<Gid>

Target GID. None = don’t call setgid.

Implementations

impl PrivilegeDrop

pub fn apply(&self) -> Result<()>

Apply chroot + setgid + setuid in the correct order.

Ordering: chroot first (requires root), then setgroups/setgid, then setuid last (once root is dropped we cannot chroot or change group).

Bind-ordering caveat

Because the current server architecture binds sockets inside spawned tasks, calling apply() before the first tokio::spawn means that sockets for privileged ports will be bound after root has been dropped. See the module-level documentation for details and operator guidance.

Trait Implementations

impl Debug for PrivilegeDrop

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PrivilegeDrop

fn default() -> PrivilegeDrop

Returns the “default value” for a type.