Struct PeerCred 

pub struct PeerCred {
    pub uid: u32,
    pub pid: i32,
}

Kernel-reported identity of the process on the other end of the socket.

PRODUCT.md A.3: the daemon authenticates the connecting process’s uid/pid via SO_PEERCRED (Linux) / LOCAL_PEERCRED (macOS) rather than trusting a token the agent could leak. This is the value those calls populate.

Fields

uid: u32

Effective user id of the connecting process.

pid: i32

Process id of the connecting process.

Implementations

impl PeerCred

pub fn is_authorized(&self, allowed_uid: u32) -> bool

Authorization predicate: is this peer the expected service/owner uid?

PRODUCT.md A.3 - the daemon runs as the dedicated secureops user and accepts connections from the owning operator uid. Real policy is wired by the daemon; this is the building block.

Trait Implementations

impl Clone for PeerCred

fn clone(&self) -> PeerCred

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PeerCred

impl Debug for PeerCred

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PeerCred

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for PeerCred

impl PartialEq for PeerCred

fn eq(&self, other: &PeerCred) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for PeerCred

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PeerCred