Enum ProtectionState 

pub enum ProtectionState {
    Strict,
    Degradable,
    Disabled,
}

What a ProtectionPolicy instructs sandlock to do with a given Protection.

Variants

Strict

Enforce; if the host kernel cannot provide this protection, confine_inner returns an error naming the protection and the kernel’s actual ABI version. This is the default for every protection.

Degradable

Enforce where the host kernel supports it; skip silently when it does not. The skip is observable via Sandbox::active_protections() and sandlock check.

Disabled

Never enforce, even on a host kernel that supports the protection. Intended for workloads that genuinely need the capability the protection blocks.

Trait Implementations

impl Clone for ProtectionState

fn clone(&self) -> ProtectionState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ProtectionState

impl Debug for ProtectionState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for ProtectionState

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for ProtectionState

impl PartialEq for ProtectionState

fn eq(&self, other: &ProtectionState) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for ProtectionState

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for ProtectionState