Struct EbpfRuleSet 

pub struct EbpfRuleSet {
    pub path_rules: Vec<PathRule>,
    pub egress_allowlist: Vec<String>,
    pub syscall_allowlist: Vec<u32>,
}

The flat rule set produced by lower_to_ebpf, consumed by the loader daemon’s map-update path.

Fields

path_rules: Vec<PathRule>

Filesystem path rules for PATH_BLOCKLIST / PATH_ALLOWLIST.

egress_allowlist: Vec<String>

Egress host allowlist (empty means “no egress restriction”).

syscall_allowlist: Vec<u32>

Permitted syscall numbers for the SYSCALL_ALLOWLIST BPF map (AAASM-3635). Empty means “no syscall allowlist” — the enforcement probe leaves a monitored PID’s syscalls unconstrained. Order-stable (ascending by the AST’s BTreeSet order) so the lowering is deterministic.

Implementations

impl EbpfRuleSet

pub fn deny_paths(&self) -> impl Iterator<Item = &str>

Convenience: the deny path patterns, in order.

Trait Implementations

impl Clone for EbpfRuleSet

fn clone(&self) -> EbpfRuleSet

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EbpfRuleSet

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EbpfRuleSet

fn default() -> EbpfRuleSet

Returns the “default value” for a type.

impl Eq for EbpfRuleSet

impl PartialEq for EbpfRuleSet

fn eq(&self, other: &EbpfRuleSet) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for EbpfRuleSet