Struct MountEntry 

pub struct MountEntry {
    pub mnt_id: u32,
    pub parent_id: u32,
    pub dev_name: String,
    pub mnt_root: String,
    pub mnt_flags: u32,
    pub fs_type: String,
    pub is_suspicious: bool,
}

Information about a single kernel mount entry.

This is the richer forensic type produced by walk_mounts, distinct from crate::MountInfo in types.rs which is the simpler 3-field type used by the fs walker. The two serve different purposes and are kept separate.

Fields

mnt_id: u32

Kernel mount id.

parent_id: u32

Parent mount id.

dev_name: String

Device name string (e.g. “/dev/sda1”).

mnt_root: String

Mount root path (best-effort).

mnt_flags: u32

Mount flags bitmask.

fs_type: String

Filesystem type name (e.g. “ext4”, “tmpfs”).

is_suspicious: bool

True when the mount exhibits suspicious characteristics.

Trait Implementations

impl Clone for MountEntry

fn clone(&self) -> MountEntry

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for MountEntry

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for MountEntry

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.