Enum PrivilegedOp 

pub enum PrivilegedOp {
    WriteSshdConfig {
        content: String,
    },
}

An operation that requires elevated privileges to perform.

Each variant fully describes the privileged write so the boundary stays auditable — there is no generic “run any command” escape hatch.

Variants

WriteSshdConfig

Atomically install new contents for /etc/ssh/sshd_config.

The caller has already serialized the desired file content. This op:

1. Stages the content in an O_EXCL, unpredictable-named temp file in the same directory as the target (/etc/ssh) — so the install is an atomic rename(2) within one filesystem, and sshd -t resolves relative Include directives (e.g. the default Include /etc/ssh/sshd_config.d/*.conf) against the live directory.
2. Always validates the staged file with sshd -t through the privileged path. If the sshd binary is genuinely unavailable, the write fails closed — an unvalidatable config is never installed.
3. Backs up the existing config to <path>.bak before install. A backup failure is fatal (the write aborts without touching the live config).
4. Installs the temp into place via a single rename(2).

Fields

content: String

The full new contents of the sshd_config file.

Trait Implementations

impl Clone for PrivilegedOp

fn clone(&self) -> PrivilegedOp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivilegedOp

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.