Struct SeccompDenyLogger 

pub struct SeccompDenyLogger { /* private fields */ }

Reads /dev/kmsg for SECCOMP deny records and emits WARN-level logs.

When --seccomp-log-denied is set with SECCOMP_FILTER_FLAG_LOG, the kernel logs denied syscalls to the audit subsystem. This reader runs in the parent process (which survives the child kill) and surfaces those records as application-level warnings. The audit record PID is matched against the container’s target process, descendants, cgroup, and PID namespace so forked workload denials are not silently dropped.

Implementations

impl SeccompDenyLogger

pub fn new(pid: u32, cgroup_path: Option<PathBuf>) -> Self

pub fn start(&mut self) -> Result<()>

Start the background reader thread.

pub fn stop(self)

Signal the logger to stop and join the thread.

Trait Implementations

impl Drop for SeccompDenyLogger

fn drop(&mut self)

Executes the destructor for this type.