Struct libscmp::Arg

#[repr(C)]
pub struct Arg { /* fields omitted */ }

Represents a syscall argument comparison, used in a filter rule.

Implementations

impl Arg

pub fn new(arg: c_uint, op: Cmp, data_a: u64, data_b: u64) -> Self

Create a syscall argument comparison given the argument number, comparison operator, and two data arguments.

For example, Arg::new(1, Cmp::Eq, 2, 0) is equivalent to Arg::new_eq(1, 2), and Arg::new(0, Cmp::MaskedEq, 1, 2) is equivalent to Arg::new_masked_eq(0, 1, 2).

pub fn new_ne(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being not equal to the given value.

Essentially, this filters for SYSCALL_ARGS[arg] != data.

pub fn new_lt(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being less than the given value.

Essentially, this filters for SYSCALL_ARGS[arg] < data.

pub fn new_le(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being less than or equal to the given value.

Essentially, this filters for SYSCALL_ARGS[arg] <= data.

pub fn new_eq(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being equal to the given value.

Essentially, this filters for SYSCALL_ARGS[arg] == data.

pub fn new_ge(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being greater than or equal to the given value.

Essentially, this filters for SYSCALL_ARGS[arg] >= data.

pub fn new_gt(arg: c_uint, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being greater than the given value.

Essentially, this filters for SYSCALL_ARGS[arg] > data.

pub fn new_masked_eq(arg: c_uint, mask: u64, data: u64) -> Self

Create a syscall argument comparison that filters for the given argument being equal to the given value, once the specified mask is applied.

Essentially, this filters for SYSCALL_ARGS[arg] & mask == data.

Trait Implementations

impl Clone for Arg

fn clone(&self) -> Arg

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Arg

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Hash for Arg

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H) where
    H: Hasher, 

Feeds a slice of this type into the given Hasher.

impl PartialEq<Arg> for Arg

fn eq(&self, other: &Arg) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Arg) -> bool

This method tests for !=.

impl Copy for Arg

impl Eq for Arg

impl StructuralEq for Arg

impl StructuralPartialEq for Arg