Enum Syscall 

pub enum Syscall {
    Read,
    Write,
    Close,
    Openat,
    Fstat,
    Lseek,
    Mmap,
    Munmap,
    Brk,
    RtSigaction,
    RtSigprocmask,
    Exit,
    ExitGroup,
    ClockGettime,
    Getrandom,
}

A syscall permitted by a SyscallAllowlist.

The variant set is deliberately the small, audited vocabulary a sandboxed workload legitimately needs; it carries the x86_64 syscall number so the eBPF lowering (AAASM-3635) can emit SYSCALL_ALLOWLIST map keys without a second name table. Adding a syscall is an explicit, reviewable change.

Variants

Read

read — read from a file descriptor.

Write

write — write to a file descriptor.

Close

close — close a file descriptor.

Openat

openat — open a file relative to a directory fd.

Fstat

fstat — get file status.

Lseek

lseek — reposition a file offset.

Mmap

mmap — map memory.

Munmap

munmap — unmap memory.

Brk

brk — change the data segment size.

RtSigaction

rt_sigaction — examine/change a signal action.

RtSigprocmask

rt_sigprocmask — examine/change blocked signals.

Exit

exit — terminate the calling thread.

ExitGroup

exit_group — terminate all threads in the process.

ClockGettime

clock_gettime — read a clock.

Getrandom

getrandom — obtain random bytes.

Implementations

impl Syscall

pub fn number(self) -> u32

The x86_64 syscall number for this syscall.

These are the stable Linux x86_64 (__NR_*) numbers, used by the AAASM-3635 lowering to populate the SYSCALL_ALLOWLIST eBPF map.

pub fn name(self) -> &'static str

The lowercase policy name for this syscall.

Trait Implementations

impl Clone for Syscall

fn clone(&self) -> Syscall

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Syscall

impl Debug for Syscall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for Syscall

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Syscall

impl FromStr for Syscall

type Err = String

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for Syscall

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for Syscall

fn cmp(&self, other: &Syscall) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for Syscall

fn eq(&self, other: &Syscall) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PartialOrd for Syscall

fn partial_cmp(&self, other: &Syscall) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl StructuralPartialEq for Syscall