Struct Capabilities 

pub struct Capabilities(<Capabilities as PublicFlags>::Internal);

Linux 能力位标志

这些标志代表了内核中各种特权操作的权限。 在单 root 用户系统中，所有进程默认拥有所有能力。

Tuple Fields

0: <Capabilities as PublicFlags>::Internal

Implementations

impl Capabilities

pub const CHOWN: Self

改变文件所有者

pub const DAC_OVERRIDE: Self

绕过文件读写执行权限检查

pub const DAC_READ_SEARCH: Self

绕过文件读权限检查

pub const FOWNER: Self

绕过文件所有者检查

pub const FSETID: Self

不清除 setuid/setgid 位

pub const KILL: Self

发送信号给任意进程

pub const SETGID: Self

修改进程 GID

pub const SETUID: Self

修改进程 UID

pub const SETPCAP: Self

传递能力

pub const LINUX_IMMUTABLE: Self

设置不可变标志

pub const NET_BIND_SERVICE: Self

绑定特权端口 (<1024)

pub const NET_BROADCAST: Self

网络广播

pub const NET_ADMIN: Self

网络管理操作

pub const NET_RAW: Self

使用 RAW 和 PACKET socket

pub const IPC_LOCK: Self

锁定内存

pub const IPC_OWNER: Self

绕过 IPC 所有权检查

pub const SYS_MODULE: Self

加载/卸载内核模块

pub const SYS_RAWIO: Self

执行 I/O 端口操作

pub const SYS_CHROOT: Self

使用 chroot()

pub const SYS_PTRACE: Self

使用 ptrace()

pub const SYS_PACCT: Self

进程统计

pub const SYS_ADMIN: Self

系统管理操作

pub const SYS_BOOT: Self

重启系统

pub const SYS_NICE: Self

修改进程优先级

pub const SYS_RESOURCE: Self

覆盖资源限制

pub const SYS_TIME: Self

设置系统时间

pub const SYS_TTY_CONFIG: Self

配置 TTY

pub const MKNOD: Self

创建设备文件

pub const LEASE: Self

建立文件租约

pub const AUDIT_WRITE: Self

写入审计日志

pub const AUDIT_CONTROL: Self

配置审计

pub const SETFCAP: Self

设置文件能力

pub const MAC_OVERRIDE: Self

覆盖 MAC 策略

pub const MAC_ADMIN: Self

配置 MAC

pub const SYSLOG: Self

访问内核日志

pub const WAKE_ALARM: Self

触发唤醒告警

pub const BLOCK_SUSPEND: Self

阻止系统挂起

pub const AUDIT_READ: Self

读取审计日志

pub const PERFMON: Self

性能监控

pub const BPF: Self

BPF 操作

pub const CHECKPOINT_RESTORE: Self

检查点/恢复

impl Capabilities

pub const fn empty() -> Self

Get a flags value with all bits unset.

pub const fn all() -> Self

Get a flags value with all known bits set.

pub const fn bits(&self) -> u64

Get the underlying bits value.

The returned value is exactly the bits set in this flags value.

pub const fn from_bits(bits: u64) -> Option<Self>

Convert from a bits value.

This method will return None if any unknown bits are set.

pub const fn from_bits_truncate(bits: u64) -> Self

Convert from a bits value, unsetting any unknown bits.

pub const fn from_bits_retain(bits: u64) -> Self

Convert from a bits value exactly.

pub fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

This method will return None if name is empty or doesn’t correspond to any named flag.

pub const fn is_empty(&self) -> bool

Whether all bits in this flags value are unset.

pub const fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

pub const fn intersects(&self, other: Self) -> bool

Whether any set bits in a source flags value are also set in a target flags value.

pub const fn contains(&self, other: Self) -> bool

Whether all set bits in a source flags value are also set in a target flags value.

pub fn insert(&mut self, other: Self)

The bitwise or (|) of the bits in two flags values.

pub fn remove(&mut self, other: Self)

The intersection of a source flags value with the complement of a target flags value (&!).

This method is not equivalent to self & !other when other has unknown bits set. remove won’t truncate other, but the ! operator will.

pub fn toggle(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in two flags values.

pub fn set(&mut self, other: Self, value: bool)

Call insert when value is true or remove when value is false.

pub const fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in two flags values.

pub const fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in two flags values.

pub const fn difference(self, other: Self) -> Self

The intersection of a source flags value with the complement of a target flags value (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

pub const fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in two flags values.

pub const fn complement(self) -> Self

The bitwise negation (!) of the bits in a flags value, truncating the result.

impl Capabilities

pub const fn iter(&self) -> Iter<Capabilities>

Yield a set of contained flags values.

Each yielded flags value will correspond to a defined named flag. Any unknown bits will be yielded together as a final flags value.

pub const fn iter_names(&self) -> IterNames<Capabilities>

Yield a set of contained named flags values.

This method is like iter, except only yields bits in contained named flags. Any unknown bits, or bits not corresponding to a contained flag will not be yielded.

impl Capabilities

pub const fn full() -> Self

拥有所有能力（root 用户）

pub const fn empty_set() -> Self

空能力集

Trait Implementations

impl Binary for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl BitAnd for Capabilities

fn bitand(self, other: Self) -> Self

The bitwise and (&) of the bits in two flags values.

type Output = Capabilities

The resulting type after applying the & operator.

impl BitAndAssign for Capabilities

fn bitand_assign(&mut self, other: Self)

The bitwise and (&) of the bits in two flags values.

impl BitOr for Capabilities

fn bitor(self, other: Capabilities) -> Self

The bitwise or (|) of the bits in two flags values.

type Output = Capabilities

The resulting type after applying the | operator.

impl BitOrAssign for Capabilities

fn bitor_assign(&mut self, other: Self)

The bitwise or (|) of the bits in two flags values.

impl BitXor for Capabilities

fn bitxor(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in two flags values.

type Output = Capabilities

The resulting type after applying the ^ operator.

impl BitXorAssign for Capabilities

fn bitxor_assign(&mut self, other: Self)

The bitwise exclusive-or (^) of the bits in two flags values.

impl Clone for Capabilities

fn clone(&self) -> Capabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Extend<Capabilities> for Capabilities

fn extend<T: IntoIterator<Item = Self>>(&mut self, iterator: T)

The bitwise or (|) of the bits in each flags value.

fn extend_one(&mut self, item: A)

🔬This is a nightly-only experimental API. (extend_one)

Extends a collection with exactly one element.

fn extend_reserve(&mut self, additional: usize)

🔬This is a nightly-only experimental API. (extend_one)

Reserves capacity in a collection for the given number of additional elements.

impl Flags for Capabilities

const FLAGS: &'static [Flag<Capabilities>]

The set of defined flags.

type Bits = u64

The underlying bits type.

fn bits(&self) -> u64

Get the underlying bits value.

fn from_bits_retain(bits: u64) -> Capabilities

Convert from a bits value exactly.

fn empty() -> Self

Get a flags value with all bits unset.

fn all() -> Self

Get a flags value with all known bits set.

fn contains_unknown_bits(&self) -> bool

This method will return true if any unknown bits are set.

fn from_bits(bits: Self::Bits) -> Option<Self>

Convert from a bits value.

fn from_bits_truncate(bits: Self::Bits) -> Self

Convert from a bits value, unsetting any unknown bits.

fn from_name(name: &str) -> Option<Self>

Get a flags value with the bits of a flag with the given name set.

fn iter(&self) -> Iter<Self>

Yield a set of contained flags values.

fn iter_names(&self) -> IterNames<Self>

Yield a set of contained named flags values.

fn iter_defined_names() -> IterDefinedNames<Self>

Yield a set of all named flags defined by [Self::FLAGS].

fn is_empty(&self) -> bool

Whether all bits in this flags value are unset.

fn is_all(&self) -> bool

Whether all known bits in this flags value are set.

fn intersects(&self, other: Self) -> bool

where Self: Sized,

Whether any set bits in a source flags value are also set in a target flags value.

fn contains(&self, other: Self) -> bool

where Self: Sized,

Whether all set bits in a source flags value are also set in a target flags value.

fn truncate(&mut self)

where Self: Sized,

Remove any unknown bits from the flags.

fn insert(&mut self, other: Self)

where Self: Sized,

The bitwise or (|) of the bits in two flags values.

fn remove(&mut self, other: Self)

where Self: Sized,

The intersection of a source flags value with the complement of a target flags value (&!).

fn toggle(&mut self, other: Self)

where Self: Sized,

The bitwise exclusive-or (^) of the bits in two flags values.

fn set(&mut self, other: Self, value: bool)

where Self: Sized,

Call [Flags::insert] when value is true or [Flags::remove] when value is false.

fn clear(&mut self)

where Self: Sized,

Unsets all bits in the flags.

fn intersection(self, other: Self) -> Self

The bitwise and (&) of the bits in two flags values.

fn union(self, other: Self) -> Self

The bitwise or (|) of the bits in two flags values.

fn difference(self, other: Self) -> Self

The intersection of a source flags value with the complement of a target flags value (&!).

fn symmetric_difference(self, other: Self) -> Self

The bitwise exclusive-or (^) of the bits in two flags values.

fn complement(self) -> Self

The bitwise negation (!) of the bits in a flags value, truncating the result.

impl FromIterator<Capabilities> for Capabilities

fn from_iter<T: IntoIterator<Item = Self>>(iterator: T) -> Self

The bitwise or (|) of the bits in each flags value.

impl IntoIterator for Capabilities

type Item = Capabilities

The type of the elements being iterated over.

type IntoIter = Iter<Capabilities>

Which kind of iterator are we turning this into?

fn into_iter(self) -> Self::IntoIter

Creates an iterator from a value.

impl LowerHex for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Not for Capabilities

fn not(self) -> Self

The bitwise negation (!) of the bits in a flags value, truncating the result.

type Output = Capabilities

The resulting type after applying the ! operator.

impl Octal for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for Capabilities

fn eq(&self, other: &Capabilities) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PublicFlags for Capabilities

type Primitive = u64

The type of the underlying storage.

type Internal = InternalBitFlags

The type of the internal field on the generated flags type.

impl Sub for Capabilities

fn sub(self, other: Self) -> Self

The intersection of a source flags value with the complement of a target flags value (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

type Output = Capabilities

The resulting type after applying the - operator.

impl SubAssign for Capabilities

fn sub_assign(&mut self, other: Self)

The intersection of a source flags value with the complement of a target flags value (&!).

This method is not equivalent to self & !other when other has unknown bits set. difference won’t truncate other, but the ! operator will.

impl UpperHex for Capabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Copy for Capabilities

impl Eq for Capabilities

impl StructuralPartialEq for Capabilities