Enum linux_audit_parser::Key

pub enum Key {
    Name(TinyVec<[u8; 14]>),
    NameUID(TinyVec<[u8; 14]>),
    NameGID(TinyVec<[u8; 14]>),
    Common(Common),
    NameTranslated(TinyVec<[u8; 14]>),
    Arg(u32, Option<u16>),
    ArgLen(u32),
    Literal(&'static str),
}

Representation of the key part of key/value pairs in Body

Variants

Name(TinyVec<[u8; 14]>)

regular ASCII-only name as returned by parser

NameUID(TinyVec<[u8; 14]>)

ASCII-only name for UID fields

NameGID(TinyVec<[u8; 14]>)

ASCII-only name for GID fields

Common(Common)

special case for common values

NameTranslated(TinyVec<[u8; 14]>)

regular ASCII-only name, output/serialization in all-caps, for translated / “enriched” values

Arg(u32, Option<u16>)

special case for argument lists: a0, a1, (SYSCALL and EXECVE); a2[0], a2[1] (EXECVE)

ArgLen(u32)

a0_len as found in EXECVE lines

Literal(&'static str)

Not returned by parser

Trait Implementations

impl Clone for Key

fn clone(&self) -> Key

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Key

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Key

fn default() -> Self

Returns the “default value” for a type.

impl Display for Key

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<&[u8]> for Key

fn from(value: &[u8]) -> Self

Converts to this type from the input type.

impl From<&'static str> for Key

fn from(value: &'static str) -> Self

Converts to this type from the input type.

impl PartialEq<[u8]> for Key

fn eq(&self, other: &[u8]) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq<str> for Key

fn eq(&self, other: &str) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialEq for Key

fn eq(&self, other: &Key) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for Key

fn serialize<S: Serializer>(&self, s: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl Eq for Key

impl StructuralPartialEq for Key