Crate product_policy 

Measured product policy: enum, per-VM value, codec.

To add a product: define its body in a sibling module, then add one N => Variant(body::Body), line to define_product_policy! below. N is a mesh wire tag and must never be reused.

Re-exports

pub use uefi_security_policy::UefiSecurityPolicy;

Modules

cwcow

Cwcow policy body and validation methods.

product_policy_helpers

Shared helpers for product policy validation and serialization. Shared helpers for product policy validation and serialization.

sivm

Sivm policy body and validation methods. Sivm policy body and validation methods. Accessor MeasuredProductPolicy::sivm is generated by define_product_policy! in lib.rs.

uefi_security_policy

UEFI enforced security settings. Shared validation for the currently enforced UEFI product-policy checks (secure-boot-required), used by product policy variants (Sivm, Cwcow, etc.).

Structs

MeasuredProductPolicy

Per-VM measured product policy.

Enums

ProductPolicy

Measured product policy. Mesh tags are part of the wire format and must never be reused.

ProductPolicyDecodeError

Errors from decode_product_policy.

Functions

decode_product_policy

Decode mesh_protobuf bytes. Caller must skip empty payloads (which signal “no policy installed”) before calling.

encode_product_policy

Encode a policy as mesh_protobuf bytes for the IGVM payload.