Struct SecurityContext 

pub struct SecurityContext {
    pub sandbox_mode: Option<SandboxMode>,
    pub user_ns: Option<u32>,
    pub mount_ns: Option<u32>,
    pub pid_ns: Option<u32>,
    pub net_ns: Option<u32>,
    pub cgroup_path: Option<String>,
    pub landlock_enabled: bool,
    pub seccomp_enabled: bool,
    pub allowlist_hits: Option<Vec<AllowlistHit>>,
}

Security context for audit trail

Fields

sandbox_mode: Option<SandboxMode>

Sandbox mode used for execution

user_ns: Option<u32>

User namespace ID

mount_ns: Option<u32>

Mount namespace ID

pid_ns: Option<u32>

PID namespace ID

net_ns: Option<u32>

Network namespace ID

cgroup_path: Option<String>

Cgroup path

landlock_enabled: bool

Landlock restrictions applied

seccomp_enabled: bool

Seccomp filter applied

allowlist_hits: Option<Vec<AllowlistHit>>

Allow-list entries accessed during execution

Trait Implementations

impl Clone for SecurityContext

fn clone(&self) -> SecurityContext

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityContext

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for SecurityContext

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityContext

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.