libcopes 1.0.0

A library for efficiently monitoring process exec and exit events on Linux
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122

// SPDX-License-Identifier: MPL-2.0
// Copyright 2025 Juan Palacios <jpalaciosdev@gmail.com>

//! Library core types and functions.

use std::{
    ffi::{OsStr, OsString},
    fmt,
    path::{Path, PathBuf},
    sync::OnceLock,
};

/// Process ID.
#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
pub struct PID(i32);

/// Process event.
#[derive(Debug, Clone, Copy, PartialEq, Eq)]
pub enum PEvent {
    Exec(PID),
    Exit(PID),
}

/// Process executable name.
#[derive(Debug, Clone, PartialEq, Eq, Hash)]
pub struct PExe(OsString);

/// Process command line.
#[derive(Debug, Clone, PartialEq, Eq, Hash)]
pub struct PCmdLine(Vec<OsString>);

/// Name of the file that was executed.
#[derive(Debug, Default, Clone, PartialEq, Eq, Hash)]
pub struct ExecutedFileName(OsString);

// --- Implementations

fn proc_path() -> &'static Path {
    static PROC_PATH: OnceLock<&Path> = OnceLock::new();
    PROC_PATH.get_or_init(|| Path::new("/proc"))
}

impl From<i32> for PID {
    fn from(value: i32) -> Self {
        PID(value)
    }
}

impl AsRef<i32> for PID {
    fn as_ref(&self) -> &i32 {
        &self.0
    }
}

impl From<PID> for PathBuf {
    fn from(pid: PID) -> Self {
        proc_path().join(pid.0.to_string())
    }
}

impl fmt::Display for PID {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        write!(f, "{}", self.0)
    }
}

impl fmt::Display for PEvent {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            PEvent::Exec(pid) => write!(f, "Exec({})", pid),
            PEvent::Exit(pid) => write!(f, "Exit({})", pid),
        }
    }
}

impl From<OsString> for PExe {
    fn from(value: OsString) -> Self {
        PExe(value)
    }
}

impl AsRef<OsStr> for PExe {
    fn as_ref(&self) -> &OsStr {
        &self.0
    }
}

impl From<Vec<OsString>> for PCmdLine {
    fn from(value: Vec<OsString>) -> Self {
        PCmdLine(value)
    }
}

impl AsRef<Vec<OsString>> for PCmdLine {
    fn as_ref(&self) -> &Vec<OsString> {
        &self.0
    }
}

impl fmt::Display for PCmdLine {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        let data = self
            .0
            .iter()
            .map(|s| s.to_string_lossy())
            .collect::<Vec<_>>()
            .join(" ");
        write!(f, "[{}]", data)
    }
}

impl From<PExe> for ExecutedFileName {
    fn from(value: PExe) -> Self {
        ExecutedFileName(value.0)
    }
}

impl fmt::Display for ExecutedFileName {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        write!(f, "{}", self.0.to_string_lossy())
    }
}