Struct CapabilityModel 

pub struct CapabilityModel {
    pub token: u64,
    pub rights: u32,
    pub owner: u64,
    pub generation: u32,
    pub parent_token: u64,
    pub address_space: u64,
}

Model of a capability token

Fields

token: u64

Unique token value

rights: u32

Rights bitmask

owner: u64

Owner process ID

generation: u32

Generation counter (incremented on revocation)

parent_token: u64

Parent token (0 = root capability)

address_space: u64

Address space this capability belongs to

Implementations

impl CapabilityModel

pub fn encode(index: u32, rights: u32, generation: u32) -> u64

Encode capability fields into a single u64 token

Layout: [generation:16][rights:16][index:32]

pub fn decode(token: u64) -> (u32, u32, u32)

Decode a token into (index, rights, generation)

pub fn derive( &self, child_token: u64, child_rights: u32, child_owner: u64, ) -> Result<CapabilityModel, CapModelError>

Derive a child capability with a subset of rights

pub fn has_rights(&self, required: u32) -> bool

Check if this capability has specific rights

Trait Implementations

impl Clone for CapabilityModel

fn clone(&self) -> CapabilityModel

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityModel

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CapabilityModel

fn eq(&self, other: &CapabilityModel) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for CapabilityModel

impl Eq for CapabilityModel

impl StructuralPartialEq for CapabilityModel