Struct HiddenDentryInfo 

pub struct HiddenDentryInfo {
    pub pid: u32,
    pub comm: String,
    pub fd: u32,
    pub dentry_addr: u64,
    pub filename: String,
    pub inode_num: u64,
    pub file_size: u64,
    pub nlink: u32,
    pub is_suspicious: bool,
}

Information about a hidden (unlinked but open) file descriptor.

Fields

pid: u32

Process ID.

comm: String

Process command name (task_struct.comm, max 16 chars).

fd: u32

File descriptor number.

dentry_addr: u64

Virtual address of the struct dentry in kernel memory.

filename: String

Filename from dentry->d_name.

inode_num: u64

Inode number from dentry->d_inode->i_ino.

file_size: u64

File size in bytes from dentry->d_inode->i_size.

nlink: u32

Hard link count (dentry->d_inode->i_nlink); 0 means the file is unlinked.

is_suspicious: bool

Whether this hidden dentry is considered suspicious.

Trait Implementations

impl Clone for HiddenDentryInfo

fn clone(&self) -> HiddenDentryInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for HiddenDentryInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for HiddenDentryInfo

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.