Struct seccompiler::SeccompRule

pub struct SeccompRule { /* fields omitted */ }

Rule that a filter attempts to match for a syscall.

If all conditions match then rule gets matched. A syscall can have many rules associated. If either of them matches, the match_action of the SeccompFilter is triggered.

Implementations

impl SeccompRule

pub fn new(conditions: Vec<SeccompCondition>) -> Result<Self, Error>

Creates a new rule. Rules with 0 conditions are not allowed.

Arguments

• conditions - Vector of SeccompConditions that the syscall must match.

Example

use seccompiler::{SeccompCondition, SeccompCmpArgLen, SeccompCmpOp, SeccompRule};

let rule = SeccompRule::new(vec![
    SeccompCondition::new(0, SeccompCmpArgLen::Dword, SeccompCmpOp::Eq, 1).unwrap(),
    SeccompCondition::new(1, SeccompCmpArgLen::Dword, SeccompCmpOp::Eq, 1).unwrap(),
]).unwrap();

Trait Implementations

impl Clone for SeccompRule

fn clone(&self) -> SeccompRule

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<SeccompRule> for BpfProgram

fn from(rule: SeccompRule) -> Self

Performs the conversion.

impl PartialEq<SeccompRule> for SeccompRule

fn eq(&self, other: &SeccompRule) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &SeccompRule) -> bool

This method tests for !=.

impl StructuralPartialEq for SeccompRule