Struct UserNsEscalationInfo 

pub struct UserNsEscalationInfo {
    pub pid: u64,
    pub comm: String,
    pub ns_depth: u32,
    pub owner_uid: u32,
    pub process_uid: u32,
    pub has_cap_sys_admin: bool,
    pub is_suspicious: bool,
}

User namespace escalation detection info.

Fields

pid: u64

Process ID.

comm: String

Process command name.

ns_depth: u32

Nesting depth of the user namespace.

owner_uid: u32

UID that owns the user namespace.

process_uid: u32

UID of the process.

has_cap_sys_admin: bool

Whether CAP_SYS_ADMIN is mapped in this namespace.

is_suspicious: bool

Whether this namespace configuration is suspicious.

Trait Implementations

impl Clone for UserNsEscalationInfo

fn clone(&self) -> UserNsEscalationInfo

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for UserNsEscalationInfo

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl IntoForensicEvents for UserNsEscalationInfo

fn into_forensic_events(self) -> Vec<ForensicEvent>

Consume this value and produce forensic events.

impl Serialize for UserNsEscalationInfo

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.