Struct seccompiler::SeccompRule

pub struct SeccompRule { /* private fields */ }

Rule that a filter attempts to match for a syscall.

If all conditions match then rule gets matched. A syscall can have many rules associated. If either of them matches, the match_action of the SeccompFilter is triggered.

Implementations

impl SeccompRule

pub fn new(conditions: Vec<SeccompCondition>) -> Result<Self, Error>

Creates a new rule. Rules with 0 conditions are not allowed.

Arguments

• conditions - Vector of SeccompConditions that the syscall must match.

Example

use seccompiler::{SeccompCmpArgLen, SeccompCmpOp, SeccompCondition, SeccompRule};

let rule = SeccompRule::new(vec![
    SeccompCondition::new(0, SeccompCmpArgLen::Dword, SeccompCmpOp::Eq, 1).unwrap(),
    SeccompCondition::new(1, SeccompCmpArgLen::Dword, SeccompCmpOp::Eq, 1).unwrap(),
])
.unwrap();

Trait Implementations

impl Clone for SeccompRule

fn clone(&self) -> SeccompRule

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompRule

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<SeccompRule> for BpfProgram

fn from(rule: SeccompRule) -> Self

Converts to this type from the input type.

impl PartialEq for SeccompRule

fn eq(&self, other: &SeccompRule) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SeccompRule

impl StructuralEq for SeccompRule

impl StructuralPartialEq for SeccompRule