Struct SivmPolicy 

pub struct SivmPolicy {
    pub require_ephemeral_vmgs: bool,
    pub require_secure_boot: bool,
    pub require_secure_boot_vars: bool,
    pub require_bcd_integrity: bool,
    pub custom_uefi_json: Vec<u8>,
}

Sivm policy body.

Fields

require_ephemeral_vmgs: bool

Reserved: require an ephemeral VMGS. Not enforced at runtime yet.

require_secure_boot: bool

Require secure boot is enabled.

require_secure_boot_vars: bool

Reserved: require PK/KEK/db/dbx variables. Not enforced at runtime yet.

require_bcd_integrity: bool

Reserved: require BootConfigurationDataHash. Not enforced at runtime yet.

custom_uefi_json: Vec<u8>

Custom UEFI JSON bytes (base64 in manifest JSON). Required in manifests and asserted non-empty at build time when secure boot plus secure-boot-vars or BCD-integrity are set;

Trait Implementations

impl Clone for SivmPolicy

fn clone(&self) -> SivmPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SivmPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SivmPolicy

fn default() -> SivmPolicy

Returns the “default value” for a type.

impl DefaultEncoding for SivmPolicy

type Encoding = TableEncoder

The encoding to use for the serialization.

impl DescribeTable for SivmPolicy

const DESCRIPTION: MessageDescription<'static>

The protobuf message description for this type.

impl<'de> Deserialize<'de> for SivmPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for SivmPolicy

fn eq(&self, other: &SivmPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for SivmPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl<'encoding, AnyR: 'static> StructDecodeMetadata<'encoding, AnyR> for SivmPolicy

const DECODERS: &'static [ErasedDecoderEntry]

The list of decoder vtables.

impl<AnyR: 'static> StructEncodeMetadata<AnyR> for SivmPolicy

const ENCODERS: &'static [ErasedEncoderEntry]

The list of encoder vtables.

impl StructMetadata for SivmPolicy

const NUMBERS: &'static [u32]

The field numbers for each field.

const OFFSETS: &'static [usize]

The byte offset to each field within the struct.

impl UefiSecurityPolicy for SivmPolicy

fn validate_secure_boot_enabled(&self, on: bool) -> Result<()>

Validate that secure boot is enabled if required by the policy.

impl StructuralPartialEq for SivmPolicy