Enum EnforcementTier 

pub enum EnforcementTier {
    KernelDeny,
    ObserveOnly,
    ProxyOnly,
}

The platform’s enforcement tier, so operators don’t over-trust a weaker OS (PRODUCT.md W0 table). The proxy itself is cross-platform; what differs is whether kernel deny backs it up.

Variants

KernelDeny

Inline kernel deny available (Linux LSM-BPF).

ObserveOnly

Observe-only kernel layer (macOS Endpoint Security is mostly observe); the proxy is the sole hard deny and MUST be fail-closed.

ProxyOnly

Proxy-only - no kernel layer wired at all; fully reliant on this PEP.

Implementations

impl EnforcementTier

pub fn current() -> Self

The tier of the host this binary is running on.

macOS gets EnforcementTier::ObserveOnly: Endpoint Security is mostly observe, so the cross-platform proxy is the only hard deny (PRODUCT.md W0).

Trait Implementations

impl Clone for EnforcementTier

fn clone(&self) -> EnforcementTier

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for EnforcementTier

impl Debug for EnforcementTier

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for EnforcementTier

impl PartialEq for EnforcementTier

fn eq(&self, other: &EnforcementTier) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for EnforcementTier