Struct SeccompFilter 

pub struct SeccompFilter { /* private fields */ }

Seccomp filter builder

Implementations

impl SeccompFilter

pub fn from_profile(profile: SeccompProfile) -> Self

Create filter from profile

pub fn minimal() -> Self

Create minimal filter

pub fn allow_syscall(&mut self, name: impl Into<String>)

Add syscall to whitelist

pub fn block_syscall(&mut self, name: impl Into<String>)

Block a syscall (deny even if in whitelist)

pub fn is_allowed(&self, name: &str) -> bool

Check if syscall is allowed

pub fn allowed_syscalls(&self) -> &HashSet<String>

Get allowed syscalls

pub fn blocked_syscalls(&self) -> &HashSet<String>

Get blocked syscalls

pub fn allowed_count(&self) -> usize

Count allowed syscalls

pub fn is_kill_on_violation(&self) -> bool

Check if killing on violation

pub fn set_kill_on_violation(&mut self, kill: bool)

Set kill on violation

pub fn profile(&self) -> SeccompProfile

Get the profile used to create this filter

pub fn validate(&self) -> Result<()>

Validate that filter is correct

pub fn export(&self) -> Result<Vec<String>>

Export as BPF program (simplified - just returns syscall names)

Trait Implementations

impl Clone for SeccompFilter

fn clone(&self) -> SeccompFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.