Rust kernel policy