Struct LandlockScope 

pub struct LandlockScope(/* private fields */);

Portées Landlock (cf. linux/landlock.h), ABI v6+ (Linux 6.12).

Ce que le scoping borne, et que rien d’autre ne bornait

Ce ne sont pas des droits par chemin. Ils ne disent pas ce qu’on a le droit de faire sur telle ressource, mais jusqu’où un domaine peut atteindre en dehors de lui-même. Deux voies latérales, précisément celles qu’aucune règle de fichier ne pouvait voir :

• un socket UNIX abstrait n’a pas de chemin — il vit dans un espace de noms à part, sans entrée de système de fichiers. Aucune règle Landlock de fichier ne pouvait donc l’atteindre : deux processus confinés séparément pouvaient dialoguer sans que leur cage en sache rien ;
• un signal ne traverse aucun descripteur et ne touche aucun chemin.

Bit	Depuis	Ce qui devient interdit
ABSTRACT_UNIX_SOCKET	Landlock v6 (Linux 6.12)	se connecter à un socket UNIX abstrait créé hors du domaine
SIGNAL	Landlock v6 (Linux 6.12)	envoyer un signal à un processus hors du domaine

La direction compte

La borne est sortante : elle empêche le processus confiné d’atteindre l’extérieur, et non l’extérieur de l’atteindre. Un parent non confiné garde donc la main sur son enfant — ce qui est nécessaire, sans quoi un lanceur ne pourrait plus arrêter ce qu’il a lancé.

À l’intérieur du domaine, rien ne change

Deux processus du même domaine continuent de se joindre et de se signaler. Le scoping isole des domaines les uns des autres, il ne fragmente pas un domaine.

Comme pour LandlockAccessFs et LandlockAccessNet, demander un bit que le noyau ne connaît pas fait échouer la création du ruleset : interroger landlock_supported_abi() avant de composer.

Implementations

impl LandlockScope

pub const ABSTRACT_UNIX_SOCKET: Self

Se connecter à un socket UNIX abstrait créé hors du domaine — Landlock v6+.

pub const SIGNAL: Self

Envoyer un signal à un processus hors du domaine — Landlock v6+.

impl LandlockScope

pub const fn empty() -> Self

Get a flags value with all bits unset.

pub const fn all() -> Self

Get a flags value with all known bits set.

pub const fn bits(&self) -> u64

Get the underlying bits value.

The returned value is exactly the bits set in this flags value.

pub const fn from_bits(bits: u64) -> Option<Self>

Convert from a bits value.

This method will return None if any unknown bits are set.

pub const fn from_bits_truncate(bits: u64) -> Self

Convert from a bits value, unsetting any unknown bits.

pub const fn from_bits_retain(bits: u64) -> Self

Convert from a bits value exactly.

pub fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

This method will return None if name is empty or doesn’t correspond to any named flag.

pub const fn is_empty(&self) -> bool

Whether all bits in self are unset.

pub const fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

pub const fn intersects(&self, other: Self) -> bool

Whether any set bits in other are also set in self.

pub const fn contains(&self, other: Self) -> bool

Whether all set bits in other are also set in self.

pub fn insert(&mut self, other: Self)

The bitwise or (|) of the bits in self and other.

pub fn remove(&mut self, other: Self)

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. remove won’t truncate other, but the ! operator will.

pub fn toggle(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in self and other.

pub fn set(&mut self, other: Self, value: bool)

Call insert when value is true or remove when value is false.

pub const fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

pub const fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in self and other.

pub const fn difference(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

pub const fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

pub const fn complement(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

impl LandlockScope

pub const fn iter(&self) -> Iter<LandlockScope>

Yield a set of contained flags values.

Each yielded flags value will correspond to a defined named flag. Any unknown bits will be yielded together as a final flags value.

pub const fn iter_names(&self) -> IterNames<LandlockScope>

Yield a set of contained named flags values.

This method is like iter, except only yields bits in contained named flags. Any unknown bits, or bits not corresponding to a contained flag will not be yielded.

Trait Implementations

impl Binary for LandlockScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl BitAnd for LandlockScope

fn bitand(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

type Output = LandlockScope

The resulting type after applying the & operator.

impl BitAndAssign for LandlockScope

fn bitand_assign(&mut self, other: Self)

The bitwise and (&) of the bits in self and other.

impl BitOr for LandlockScope

fn bitor(self, other: LandlockScope) -> Self

The bitwise or (|) of the bits in self and other.

type Output = LandlockScope

The resulting type after applying the | operator.

impl BitOrAssign for LandlockScope

fn bitor_assign(&mut self, other: Self)

The bitwise or (|) of the bits in self and other.

impl BitXor for LandlockScope

fn bitxor(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

type Output = LandlockScope

The resulting type after applying the ^ operator.

impl BitXorAssign for LandlockScope

fn bitxor_assign(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in self and other.

impl Clone for LandlockScope

fn clone(&self) -> LandlockScope

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for LandlockScope

impl Debug for LandlockScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for LandlockScope

fn default() -> LandlockScope

Returns the “default value” for a type.

impl Eq for LandlockScope

impl Extend<LandlockScope> for LandlockScope

fn extend<T: IntoIterator<Item = Self>>(&mut self, iterator: T)

The bitwise or (|) of the bits in each flags value.

fn extend_one(&mut self, item: A)

🔬This is a nightly-only experimental API. (extend_one)

Extends a collection with exactly one element.

fn extend_reserve(&mut self, additional: usize)

🔬This is a nightly-only experimental API. (extend_one)

Reserves capacity in a collection for the given number of additional elements.

impl Flags for LandlockScope

const FLAGS: &'static [Flag<LandlockScope>]

The set of defined flags.

type Bits = u64

The underlying bits type.

fn bits(&self) -> u64

Get the underlying bits value.

fn from_bits_retain(bits: u64) -> LandlockScope

Convert from a bits value exactly.

fn empty() -> Self

Get a flags value with all bits unset.

fn all() -> Self

Get a flags value with all known bits set.

fn known_bits(&self) -> Self::Bits

Get the known bits from a flags value.

fn unknown_bits(&self) -> Self::Bits

Get the unknown bits from a flags value.

fn contains_unknown_bits(&self) -> bool

This method will return true if any unknown bits are set.

fn from_bits(bits: Self::Bits) -> Option<Self>

Convert from a bits value.

fn from_bits_truncate(bits: Self::Bits) -> Self

Convert from a bits value, unsetting any unknown bits.

fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

fn iter(&self) -> Iter<Self>

Yield a set of contained flags values.

fn iter_names(&self) -> IterNames<Self>

Yield a set of contained named flags values.

fn iter_defined_names() -> IterDefinedNames<Self>

Yield a set of all named flags defined by [Self::FLAGS].

fn is_empty(&self) -> bool

Whether all bits in this flags value are unset.

fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

fn intersects(&self, other: Self) -> bool

where Self: Sized,

Whether any set bits in other are also set in self.

fn contains(&self, other: Self) -> bool

where Self: Sized,

Whether all set bits in other are also set in self.

fn truncate(&mut self)

where Self: Sized,

Remove any unknown bits from the flags.

fn insert(&mut self, other: Self)

where Self: Sized,

The bitwise or (|) of the bits in self and other.

fn remove(&mut self, other: Self)

where Self: Sized,

The intersection of self with the complement of other (&!).

fn toggle(&mut self, other: Self)

where Self: Sized,

The bitwise exclusive-or (^) of the bits in self and other.

fn set(&mut self, other: Self, value: bool)

where Self: Sized,

Call [Flags::insert] when value is true or [Flags::remove] when value is false.

fn clear(&mut self)

where Self: Sized,

Unsets all bits in the flags.

fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in self and other.

fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in self and other.

fn difference(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in self and other.

fn complement(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

impl FromIterator<LandlockScope> for LandlockScope

fn from_iter<T: IntoIterator<Item = Self>>(iterator: T) -> Self

The bitwise or (|) of the bits in each flags value.

impl Hash for LandlockScope

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl IntoIterator for LandlockScope

type Item = LandlockScope

The type of the elements being iterated over.

type IntoIter = Iter<LandlockScope>

Which kind of iterator are we turning this into?

fn into_iter(self) -> Self::IntoIter

Creates an iterator from a value.

impl LowerHex for LandlockScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Not for LandlockScope

fn not(self) -> Self

The bitwise negation (!) of the bits in self, truncating the result.

type Output = LandlockScope

The resulting type after applying the ! operator.

impl Octal for LandlockScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for LandlockScope

fn eq(&self, other: &LandlockScope) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PublicFlags for LandlockScope

type Primitive = u64

The type of the underlying storage.

type Internal = InternalBitFlags

The type of the internal field on the generated flags type.

impl StructuralPartialEq for LandlockScope

impl Sub for LandlockScope

fn sub(self, other: Self) -> Self

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

type Output = LandlockScope

The resulting type after applying the - operator.

impl SubAssign for LandlockScope

fn sub_assign(&mut self, other: Self)

The intersection of self with the complement of other (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

impl UpperHex for LandlockScope

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.