Struct Policy 

pub struct Policy { /* private fields */ }

Implementations

impl Policy

pub fn new(rules_by_program: MultiMap<String, RuleRef>) -> Self

pub fn from_parts( rules_by_program: MultiMap<String, RuleRef>, network_rules: Vec<NetworkRule>, host_executables_by_name: HashMap<String, Arc<[AbsolutePathBuf]>>, ) -> Self

pub fn empty() -> Self

pub fn rules(&self) -> &MultiMap<String, RuleRef>

pub fn network_rules(&self) -> &[NetworkRule]

pub fn host_executables(&self) -> &HashMap<String, Arc<[AbsolutePathBuf]>>

pub fn get_allowed_prefixes(&self) -> Vec<Vec<String>>

pub fn add_prefix_rule( &mut self, prefix: &[String], decision: Decision, ) -> Result<()>

pub fn add_network_rule( &mut self, host: &str, protocol: NetworkRuleProtocol, decision: Decision, justification: Option<String>, ) -> Result<()>

pub fn set_host_executable_paths( &mut self, name: String, paths: Vec<AbsolutePathBuf>, )

pub fn merge_overlay(&self, overlay: &Policy) -> Policy

pub fn compiled_network_domains(&self) -> (Vec<String>, Vec<String>)

pub fn check<F>(&self, cmd: &[String], heuristics_fallback: &F) -> Evaluation

where F: Fn(&[String]) -> Decision,

pub fn check_with_options<F>( &self, cmd: &[String], heuristics_fallback: &F, options: &MatchOptions, ) -> Evaluation

where F: Fn(&[String]) -> Decision,

pub fn check_multiple<Commands, F>( &self, commands: Commands, heuristics_fallback: &F, ) -> Evaluation

where Commands: IntoIterator, Commands::Item: AsRef<[String]>, F: Fn(&[String]) -> Decision,

Checks multiple commands and aggregates the results.

pub fn check_multiple_with_options<Commands, F>( &self, commands: Commands, heuristics_fallback: &F, options: &MatchOptions, ) -> Evaluation

where Commands: IntoIterator, Commands::Item: AsRef<[String]>, F: Fn(&[String]) -> Decision,

pub fn matches_for_command( &self, cmd: &[String], heuristics_fallback: Option<&'_ dyn Fn(&[String]) -> Decision>, ) -> Vec<RuleMatch>

Returns matching rules for the given command. If no rules match and heuristics_fallback is provided, returns a single HeuristicsRuleMatch with the decision rendered by heuristics_fallback.

If heuristics_fallback.is_some(), then the returned vector is guaranteed to be non-empty.

pub fn matches_for_command_with_options( &self, cmd: &[String], heuristics_fallback: Option<&'_ dyn Fn(&[String]) -> Decision>, options: &MatchOptions, ) -> Vec<RuleMatch>

Trait Implementations

impl Clone for Policy

fn clone(&self) -> Policy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Policy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.