Enum FsDecision 

pub enum FsDecision {
    NotRequested,
    Confine,
    RunUnconfinedWithWarning {
        reason: String,
    },
    Refuse {
        reason: String,
    },
}

What to do about filesystem confinement for one subprocess spawn.

Variants

NotRequested

The tier is DangerFullAccess, or the OS backstop isn’t active for this call (enabled resolves to false) — no confinement is even attempted. Byte-identical to pre-P5-10 behavior.

Confine

Confinement IS available on this platform/kernel — apply it for real (the caller installs the pre_exec closure).

RunUnconfinedWithWarning

Confinement was requested but this platform/kernel cannot provide it, and escalation says to proceed anyway (allow, or ask with an approving handler) — run UNCONFINED, with reason surfaced as a loud, one-time warning.

Fields

reason: String

Human-readable reason, fed to the one-time warning + the tool error message (on the Refuse sibling) so the honest gap is always named, never silent.

Refuse

Confinement was requested, this platform/kernel cannot provide it, and escalation says to refuse (deny, the default; or ask with no handler installed / a denying handler). The subprocess is NOT spawned at all.

Fields

reason: String

Human-readable reason, returned to the model as the tool error.

Trait Implementations

impl Clone for FsDecision

fn clone(&self) -> FsDecision

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for FsDecision

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Eq for FsDecision

impl PartialEq for FsDecision

fn eq(&self, other: &FsDecision) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for FsDecision