Enum PrincipalClaim 

pub enum PrincipalClaim {
    Account,
    AttributionFailed,
    Unrecognized,
}

What a stored caller_principal string claims about who acted.

Three outcomes rather than a bool, because “names an account”, “says it could not name one”, and “cannot be read at all” call for three different lines in an audit report. Collapsing the last two would report a corrupt or future-encoded principal as an honest attribution failure.

Variants

Account

A known scheme with a non-empty value: uid:1000, token:vsock.

Names an account, which is not the same as naming a person. See the caveats in SECURITY.md: a uid is only as strong as account hygiene, and token:vsock proves possession of a file.

AttributionFailed

Exactly the string the daemon signs when attribution failed.

Unrecognized

Anything else. Not an account, and not a recognised admission either.

Trait Implementations

impl Clone for PrincipalClaim

fn clone(&self) -> PrincipalClaim

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for PrincipalClaim

impl Debug for PrincipalClaim

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PrincipalClaim

impl PartialEq for PrincipalClaim

fn eq(&self, other: &PrincipalClaim) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for PrincipalClaim