restrict 0.2.1

A crate to allow, deny, or trace Linux syscalls with an ergonomic, auto-generated enum customized for your system architecture.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

use libc::pid_t;

use crate::{policy::Syscall, registers::Registers, SeccompError};

/// The Interceptor callback arguments
pub struct Interceptor {
    /// syscall
    pub syscall: Syscall,
    /// registers
    pub registers: Registers,
    /// child_pid
    pub child_pid: pid_t,
}

impl Interceptor {
    /// start a new global interceptor per syscall(in the event loop)
    pub fn new(sc: Syscall, regs: Registers, child_pid: pid_t) -> Self {
        Self {
            syscall: sc,
            registers: regs,
            child_pid: child_pid,
        }
    }
    /// commit registers
    pub fn commit_regs(&self) -> Result<(), SeccompError> {
        self.registers.commit_regs(self.child_pid)?;
        Ok(())
    }
}