Enum RestrictSelfFlag 

#[non_exhaustive]
pub enum RestrictSelfFlag {
    LogSameExec,
    LogNewExec,
    LogSubdomains,
    AllThreads,
}

Identifies a configuration flag for the landlock_restrict_self() syscall.

Unlike access rights (AccessFs, AccessNet) and scopes (Scope), these flags are not passed to landlock_create_ruleset() but to landlock_restrict_self(). They control audit logging behavior and thread synchronization rather than access restrictions.

Each flag is set through a dedicated boolean method on RulesetCreatedAttr or RestrictSelfAttr. The polarity mapping (e.g., log_same_exec(false) maps to LANDLOCK_RESTRICT_SELF_LOG_SAME_EXEC_OFF) is handled internally.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

LogSameExec

Same-exec logging (see RulesetCreatedAttr::log_same_exec()).

LogNewExec

New-exec logging (see RulesetCreatedAttr::log_new_exec()).

LogSubdomains

Subdomain logging (see RestrictSelfAttr::log_subdomains()).

AllThreads

Apply the restriction to all threads of the process (see RestrictSelfAttr::all_threads()).

Trait Implementations

impl Clone for RestrictSelfFlag

fn clone(&self) -> RestrictSelfFlag

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for RestrictSelfFlag

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for RestrictSelfFlag

fn eq(&self, other: &RestrictSelfFlag) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for RestrictSelfFlag

impl Eq for RestrictSelfFlag

impl StructuralPartialEq for RestrictSelfFlag

impl SyscallFlag for RestrictSelfFlag