Struct PrivDrop 

pub struct PrivDrop {
    pub uid: Option<u32>,
    pub gid: Option<u32>,
    pub chroot: Option<PathBuf>,
}

A resolved set of privilege-dropping actions: switch to uid/gid and, optionally, chroot into a directory. Build one with PrivDrop::parse, then apply it once, after all listeners are bound.

Fields

uid: Option<u32>

Target user id, if a user was requested.

gid: Option<u32>

Target group id, if a group (or a user with a primary group) was requested.

chroot: Option<PathBuf>

Directory to chroot into before dropping, if any.

Implementations

impl PrivDrop

pub fn parse(user: Option<&str>, chroot: Option<&str>) -> Result<PrivDrop>

Parse a user spec and an optional chroot path into a PrivDrop.

user accepts NAME, UID, NAME:GROUP, or UID:GID. A non-numeric NAME is resolved to its uid via getpwnam_r; if no group is given the user’s primary gid is adopted. A non-numeric GROUP is resolved via getgrnam_r. Numeric components are used directly.

pub fn apply(&self) -> Result<()>

Apply the drop, in the security-critical order: chroot+chdir("/"), then setgroups+setgid, then setuid, then verify root cannot be regained. Unix only.

Trait Implementations

impl Clone for PrivDrop

fn clone(&self) -> PrivDrop

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PrivDrop

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PrivDrop

fn default() -> PrivDrop

Returns the “default value” for a type.

impl Eq for PrivDrop

impl PartialEq for PrivDrop

fn eq(&self, other: &PrivDrop) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for PrivDrop