Enum landlock::ABI

#[non_exhaustive]
pub enum ABI {
    Unsupported,
    V1,
    V2,
}

Version of the Landlock ABI.

ABI enables to get the features supported by a specific Landlock ABI. For example, AccessFs::from_all(ABI::V1) gets all the file system access rights defined by the first version.

Without ABI, it would be hazardous to rely on the the full set of access flags (e.g., BitFlags::<AccessFs>::all() or BitFlags::ALL), a moving target that would change the semantics of your Landlock rule when migrating to a newer version of this crate (i.e. non-breaking change with new supported features). This usage should then be considered indeterministic because requested features (e.g., access rights) could not be tied to the application source code.

Such ABI is also convenient to get the features supported by a specific Linux kernel without relying on the kernel version (which may not be accessible or patched).

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

Unsupported

Kernel not supporting Landlock, either because it is not built with Landlock or Landlock is not enabled at boot.

V1

First Landlock ABI, introduced with Linux 5.13.

V2

Second Landlock ABI, introduced with Linux 5.19.

Trait Implementations

impl Clone for ABI

fn clone(&self) -> ABI

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for ABI