Struct endpointsecurity_rs::EsMessage
source · pub struct EsMessage {
pub action: EsActionType,
pub event: EsEventType,
pub event_data: Option<EsEventData>,
pub version: u32,
pub seq_num: u64,
pub process: Option<EsProcess>,
pub thread_id: Option<u64>,
/* private fields */
}
Fields§
§action: EsActionType
§event: EsEventType
§event_data: Option<EsEventData>
§version: u32
§seq_num: u64
§process: Option<EsProcess>
§thread_id: Option<u64>
Implementations§
source§impl EsMessage
impl EsMessage
pub fn allow(&self, client: &EsClient)
sourcepub fn deny(&self, client: &EsClient)
pub fn deny(&self, client: &EsClient)
Examples found in repository?
examples/disallow_rename.rs (line 14)
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
fn main() {
let mut client = EsClient::new().unwrap();
client.add_event(EsEventType::AuthRename).subscribe();
loop {
let ev = client.rx.recv().unwrap();
if let Some(ref data) = ev.event_data {
match data {
EsEventData::AuthRename(info) => {
if info.source.path.contains("/Users/idipot/subcom.tech/test") {
println!("{:?}", ev);
ev.deny(&client);
} else {
}
}
_ => {}
}
}
}
}