Crate actplane_bpf 

ActPlane eBPF loader (aya).

Loads the prebuilt CO-RE object process.bpf.o (compiled from the untouched kernel C in this directory), installs the compiled policy into .rodata, attaches the enforcer, and surfaces TAINT_VIOLATION events. This is the pure-Rust replacement for the C process loader: same behavior, but loaded in-process via aya with no libbpf/clang at runtime.

The config blob is exactly the struct taint_config the collector’s DSL compiler already produces (the same bytes the C loader read from --config).

Structs

Loader

Violation

A policy violation reported by the kernel.

Functions

bpf_lsm_active

True if bpf appears in the active LSM list (enables pre-op block).