Enum ArgCmp 

pub enum ArgCmp {
    NotEqual {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    LessThan {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    LessThanOrEqual {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    Equal {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    GreaterThanOrEqual {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    GreaterThan {
        arg_idx: u32,
        value: ArgCmpValue,
    },
    EqualMasked {
        arg_idx: u32,
        mask: u64,
        value: ArgCmpValue,
    },
}

Available on crate feature security and Linux and (x86-64 or AArch64) only.

Syscall argument comparators to be used in Rule.

Argument comparators add additional filtering layer to rules allowing to compare syscall’s argument with the provided value and apply the exception rule only if the comparisson is successful.

Variants

NotEqual

Checks that argument is not equal to the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

LessThan

Checks that argument is less than the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

LessThanOrEqual

Checks that argument is less than or equal to the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

Equal

Checks that argument is equal to the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

GreaterThanOrEqual

Checks that argument is greater than or equal to the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

GreaterThan

Checks that argument is greater than the provided value.

Fields

arg_idx: u32

The index of the argument.

value: ArgCmpValue

Value to compare the argument with (can be a raw pointer).

EqualMasked

Checks that argument is equal to the provided value after application of the provided bitmask.

Fields

arg_idx: u32

The index of the argument.

mask: u64

The bitmask to be applied to the argument before comparison.

value: ArgCmpValue

Value to compare the masked argument with.

Trait Implementations

impl Clone for ArgCmp

fn clone(&self) -> ArgCmp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for ArgCmp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for ArgCmp

fn eq(&self, other: &ArgCmp) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for ArgCmp

impl StructuralPartialEq for ArgCmp