Struct es_event_open_t

#[repr(C)]
pub struct es_event_open_t {
    pub fflag: i32,
    pub file: ShouldNotBeNull<es_file_t>,
    /* private fields */
}

Available on macOS only.

Open a file system object.

The fflag field represents the mask as applied by the kernel, not as represented by typical open(2) oflag values. When responding to ES_EVENT_TYPE_AUTH_OPEN events using es_respond_flags_result(), ensure that the same FFLAG values are used (e.g. FREAD, FWRITE instead of O_RDONLY, O_RDWR, etc…).

Cache key for this event type: (process executable file, file that will be opened).

See fcntl.h

Fields

fflag: i32

The desired flags to be used when opening file (see note)

file: ShouldNotBeNull<es_file_t>

The file that will be opened

Implementations

impl es_event_open_t

Accessors for ShouldNotBeNull fields

pub unsafe fn file(&self) -> &es_file_t

Gives a references to the field while checking for null.

Safety

See ShouldNotBeNull safety requirements.