hakoniwa 1.6.0

Process isolation for Linux using namespaces, resource limits, cgroups, landlock and seccomp.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28

use super::{Action, ArgCmp};

/// Represents a filter rule.
#[derive(Clone, Debug)]
pub struct Rule {
    pub action: Action,
    pub sysname: String,
    pub(crate) argcmps: Vec<ArgCmp>,
}

impl std::fmt::Display for Rule {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        let action = self.action;
        let sysname = &self.sysname;
        let argcmps = self
            .argcmps
            .iter()
            .map(|cmp| format!("{cmp}"))
            .collect::<Vec<_>>()
            .join(", ");

        if argcmps.is_empty() {
            write!(f, "{sysname}(..) -> {action:?}")
        } else {
            write!(f, "{sysname}({argcmps}, ..) -> {action:?}")
        }
    }
}