Skip to main content

SecurityPolicy

Enum SecurityPolicy 

Source
#[repr(u8)]
pub enum SecurityPolicy { Permissive = 0, WarnOnly = 1, Strict = 2, Paranoid = 3, }
Expand description

Manifest signature verification policy.

Controls how the runtime handles unsigned or invalid signatures when opening an RVF file. Default is Strict — no signature means no mount in production.

Variants§

§

Permissive = 0

No signature verification. For development and testing only.

§

WarnOnly = 1

Warn on missing or invalid signatures, but allow open.

§

Strict = 2

Require valid signature on Level 0 manifest. DEFAULT for production.

§

Paranoid = 3

Require valid signatures on Level 0, Level 1, and all hotset-referenced segments. Full chain verification.

Implementations§

Source§

impl SecurityPolicy

Source

pub const fn requires_signature(&self) -> bool

Returns true if signature verification is required at mount time.

Source

pub const fn verifies_content_hashes(&self) -> bool

Returns true if content hash verification is performed on hotset access.

Source

pub const fn verifies_level1(&self) -> bool

Returns true if Level 1 manifest is also signature-verified.

Trait Implementations§

Source§

impl Clone for SecurityPolicy

Source§

fn clone(&self) -> SecurityPolicy

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for SecurityPolicy

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for SecurityPolicy

Source§

fn default() -> Self

Returns the “default value” for a type. Read more
Source§

impl Hash for SecurityPolicy

Source§

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher. Read more
1.3.0 · Source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
Source§

impl PartialEq for SecurityPolicy

Source§

fn eq(&self, other: &SecurityPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Copy for SecurityPolicy

Source§

impl Eq for SecurityPolicy

Source§

impl StructuralPartialEq for SecurityPolicy

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.