From 45df4d0d9b577fecee798d672695fe24ff57fb1b Mon Sep 17 00:00:00 2001 From: mo khan Date: Tue, 15 Jul 2025 16:37:08 -0600 Subject: feat: migrate from Cedar to SpiceDB authorization system This is a major architectural change that replaces the Cedar policy-based authorization system with SpiceDB's relation-based authorization. Key changes: - Migrate from Rust to Go implementation - Replace Cedar policies with SpiceDB schema and relationships - Switch from envoy `ext_authz` with Cedar to SpiceDB permission checks - Update build system and dependencies for Go ecosystem - Maintain Envoy integration for external authorization This change enables more flexible permission modeling through SpiceDB's Google Zanzibar inspired relation-based system, supporting complex hierarchical permissions that were difficult to express in Cedar. Breaking change: Existing Cedar policies and Rust-based configuration will no longer work and need to be migrated to SpiceDB schema. --- vendor/rustix/src/process/priority.rs | 132 ---------------------------------- 1 file changed, 132 deletions(-) delete mode 100644 vendor/rustix/src/process/priority.rs (limited to 'vendor/rustix/src/process/priority.rs') diff --git a/vendor/rustix/src/process/priority.rs b/vendor/rustix/src/process/priority.rs deleted file mode 100644 index 0051b068..00000000 --- a/vendor/rustix/src/process/priority.rs +++ /dev/null @@ -1,132 +0,0 @@ -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -use crate::process::{Pid, Uid}; -use crate::{backend, io}; - -/// `nice(inc)`—Adjust the scheduling priority of the current process. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/nice.html -/// [Linux]: https://man7.org/linux/man-pages/man2/nice.2.html -#[inline] -pub fn nice(inc: i32) -> io::Result { - backend::process::syscalls::nice(inc) -} - -/// `getpriority(PRIO_USER, uid)`—Get the scheduling priority of the given -/// user. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/getpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/getpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "getpriority")] -pub fn getpriority_user(uid: Uid) -> io::Result { - backend::process::syscalls::getpriority_user(uid) -} - -/// `getpriority(PRIO_PGRP, gid)`—Get the scheduling priority of the given -/// process group. -/// -/// A `pgid` of `None` means the process group of the calling process. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/getpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/getpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "getpriority")] -pub fn getpriority_pgrp(pgid: Option) -> io::Result { - backend::process::syscalls::getpriority_pgrp(pgid) -} - -/// `getpriority(PRIO_PROCESS, pid)`—Get the scheduling priority of the given -/// process. -/// -/// A `pid` of `None` means the calling process. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/getpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/getpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "getpriority")] -pub fn getpriority_process(pid: Option) -> io::Result { - backend::process::syscalls::getpriority_process(pid) -} - -/// `setpriority(PRIO_USER, uid)`—Get the scheduling priority of the given -/// user. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/setpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/setpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "setpriority")] -pub fn setpriority_user(uid: Uid, priority: i32) -> io::Result<()> { - backend::process::syscalls::setpriority_user(uid, priority) -} - -/// `setpriority(PRIO_PGRP, pgid)`—Get the scheduling priority of the given -/// process group. -/// -/// A `pgid` of `None` means the process group of the calling process. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/setpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/setpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "setpriority")] -pub fn setpriority_pgrp(pgid: Option, priority: i32) -> io::Result<()> { - backend::process::syscalls::setpriority_pgrp(pgid, priority) -} - -/// `setpriority(PRIO_PROCESS, pid)`—Get the scheduling priority of the given -/// process. -/// -/// A `pid` of `None` means the calling process. -/// -/// # References -/// - [POSIX] -/// - [Linux] -/// - [Apple] -/// -/// [POSIX]: https://pubs.opengroup.org/onlinepubs/9799919799/functions/setpriority.html -/// [Linux]: https://man7.org/linux/man-pages/man2/setpriority.2.html -/// [Apple]: https://developer.apple.com/library/archive/documentation/System/Conceptual/ManPages_iPhoneOS/man2/setpriority.2.html -#[cfg(not(any(target_os = "espidf", target_os = "horizon")))] -#[inline] -#[doc(alias = "setpriority")] -pub fn setpriority_process(pid: Option, priority: i32) -> io::Result<()> { - backend::process::syscalls::setpriority_process(pid, priority) -} -- cgit v1.2.3