Struct ProcessCapabilities 

pub struct ProcessCapabilities {
    pub pid: u64,
    pub name: String,
    pub effective: u64,
    pub permitted: u64,
    pub inheritable: u64,
    pub is_suspicious: bool,
    pub suspicious_caps: Vec<String>,
}

Process capability information extracted from task_struct.cred.

Fields

pid: u64

Process ID.

name: String

Process command name.

effective: u64

Bitmask of effective capabilities.

permitted: u64

Bitmask of permitted capabilities.

inheritable: u64

Bitmask of inheritable capabilities.

is_suspicious: bool

True if the process is non-root with elevated capabilities.

suspicious_caps: Vec<String>

Names of the suspicious capabilities held by a non-root process.

Trait Implementations

impl Clone for ProcessCapabilities

fn clone(&self) -> ProcessCapabilities

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ProcessCapabilities

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for ProcessCapabilities

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.