From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 15 Jul 2025 16:37:08 -0600 Subject: feat: migrate from Cedar to SpiceDB authorization system This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. --- vendor/rustix/src/process/pivot_root.rs | 18 ------------------ 1 file changed, 18 deletions(-) delete mode 100644 vendor/rustix/src/process/pivot_root.rs (limited to 'vendor/rustix/src/process/pivot_root.rs') diff --git a/vendor/rustix/src/process/pivot_root.rs b/vendor/rustix/src/process/pivot_root.rs deleted file mode 100644 index 91672774..00000000 --- a/vendor/rustix/src/process/pivot_root.rs +++ /dev/null @@ -1,18 +0,0 @@ -#[cfg(feature = "fs")] -#[cfg_attr(docsrs, doc(cfg(feature = "fs")))] -use crate::{backend, io, path}; - -/// `pivot_root(new_root, put_old)`—Change the root mount. -/// -/// # References -/// - [Linux] -/// -/// [Linux]: https://man7.org/linux/man-pages/man2/pivot_root.2.html -#[cfg(feature = "fs")] -#[cfg_attr(docsrs, doc(cfg(feature = "fs")))] -#[inline] -pub fn pivot_root(new_root: P, put_old: Q) -> io::Result<()> { - new_root.into_with_c_str(|new_root| { - put_old.into_with_c_str(|put_old| backend::process::syscalls::pivot_root(new_root, put_old)) - }) -} -- cgit v1.2.3