Enum NotifyMode 

pub enum NotifyMode {
    Disabled,
    Monitor,
    Virtualize,
}

Seccomp user notification mode.

Controls how the supervisor handles intercepted syscalls from the sandboxed child.

Variants

Disabled

No seccomp notify filter installed. Zero overhead. Default.

Monitor

Supervisor logs syscalls and returns SECCOMP_USER_NOTIF_FLAG_CONTINUE. Minimal overhead. For debugging/auditing.

Virtualize

Supervisor intercepts FS syscalls, translates paths via VirtualFs, opens files at translated paths, injects fd via SECCOMP_IOCTL_NOTIF_ADDFD.

Trait Implementations

impl Clone for NotifyMode

fn clone(&self) -> NotifyMode

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NotifyMode

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for NotifyMode

fn default() -> NotifyMode

Returns the “default value” for a type.

impl PartialEq for NotifyMode

fn eq(&self, other: &NotifyMode) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for NotifyMode

impl Eq for NotifyMode

impl StructuralPartialEq for NotifyMode