Enum PrivilegeMode 

pub enum PrivilegeMode {
    Unprivileged,
    Privileged,
    Auto,
}

Determines how the sandbox operates with respect to privileges

Variants

Unprivileged

Use only unprivileged mechanisms: user namespaces + seccomp + landlock + setrlimit. Does NOT require root. Fails if essential unprivileged features are unavailable.

Privileged

Use all available mechanisms including privileged ones: all namespaces + cgroups + chroot + seccomp. Requires root. Fails if not running as root.

Auto

Automatically detect the best available mode. Uses privileged mode if running as root, otherwise falls back to unprivileged.

Implementations

impl PrivilegeMode

pub fn resolve(&self, caps: &SystemCapabilities) -> ResolvedMode

Resolve Auto mode to a concrete mode based on system capabilities

Trait Implementations

impl Clone for PrivilegeMode

fn clone(&self) -> PrivilegeMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivilegeMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for PrivilegeMode

fn default() -> PrivilegeMode

Returns the “default value” for a type.

impl PartialEq for PrivilegeMode

fn eq(&self, other: &PrivilegeMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for PrivilegeMode

impl Eq for PrivilegeMode

impl StructuralPartialEq for PrivilegeMode