Struct PeerIdentityConfig 

pub struct PeerIdentityConfig {
    pub enabled: bool,
    pub require_uid_match: bool,
    pub allowed_gids: Vec<u32>,
    pub allowed_pids: Vec<u32>,
}

Peer identity verification configuration.

C1: socket owner verification — the process that bound the socket (this process) is the only allowed owner by definition. C2: peer credentials verification — connecting process must match configured identity expectations.

Fields

enabled: bool

Whether peer credential checks are enabled. Default: true.

require_uid_match: bool

Require peer uid to match this process uid. Default: true.

allowed_gids: Vec<u32>

Allowed gid list. Empty means gid check is disabled. Default: empty.

allowed_pids: Vec<u32>

Allowed pid list. Empty means pid check is disabled. Pid checks are inherently racy and only useful in container environments with deterministic pids. Default: empty.

Trait Implementations

impl Clone for PeerIdentityConfig

fn clone(&self) -> PeerIdentityConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PeerIdentityConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PeerIdentityConfig

fn default() -> Self

Returns secure-by-default peer identity config: uid match required, gid and pid checks disabled.

impl<'de> Deserialize<'de> for PeerIdentityConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for PeerIdentityConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl PartialEq for PeerIdentityConfig

fn eq(&self, other: &PeerIdentityConfig) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PeerIdentityConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PeerIdentityConfig