Enum libscmp::Flag

#[non_exhaustive]
#[repr(i32)]
pub enum Flag {
    NoNewPrivs,
    Tsync,
    Tskip,
    Log,
    DisableSSB,
    SysRawRC,
}

Represents a boolean flag that can be set on a filter.

Variants (Non-exhaustive)

Non-exhaustive enums could have additional variants added in future. Therefore, when matching against variants of non-exhaustive enums, an extra wildcard arm must be added to account for any future variants.

NoNewPrivs

Whether libseccomp should enable the “no-new-privs” mechanism before loading the seccomp filter (default true).

In most cases, this should be set to true.

Tsync

Whether the kernel should attempt to synchronize the seccomp filters across all threads when loading them into the kernel (default false).

This is only supported on Linux 3.17+, and it may cause loading the seccomp filters to fail.

Tskip

Whether libseccomp should allow filter rules that target the -1 syscall (sometimes used by ptrace()rs to skip syscalls; default false). Only supported on libseccomp v2.4.0+.

Log

Whether the kernel should log all non-“allow” actions taken (default false). Only supported on libseccomp v2.4.0+.

DisableSSB

Whether to disable Speculative Store Bypass mitigation for this filter (default false). Only supported on libseccomp v2.5.0+.

SysRawRC

Whether libseccomp should pass system error codes back to the caller instead of returning ECANCELED (default false). Only supported on libseccomp v2.5.0+.

Note: Use of this option is not reccommended. The Error struct already specially checks for ECANCELED and retrieves the value of errno in that case; enabling this option will simply make the returned errors more confusing.

Trait Implementations

impl Clone for Flag

fn clone(&self) -> Flag

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Flag

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Flag

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given Hasher.

impl PartialEq<Flag> for Flag

fn eq(&self, other: &Flag) -> bool

This method tests for self and other values to be equal, and is used by ==.

#[must_use]

fn ne(&self, other: &Rhs) -> bool

This method tests for !=.

impl Copy for Flag

impl Eq for Flag

impl StructuralEq for Flag

impl StructuralPartialEq for Flag