Skip to main content

diminish

sim_kernel::capability

Function diminish 

Source 
pub fn diminish(
    current: &CapabilitySet,
    allowed: &CapabilitySet,
) -> CapabilitySet
Expand description

Computes the diminished capability set for an explicitly narrowed run.

The result contains exactly the capabilities the caller already holds and the request explicitly allows. It is therefore a subset of both inputs and never grants a capability absent from current.