Struct SeccompFilter 

pub struct SeccompFilter { /* private fields */ }

Seccomp filter builder

Implementations

impl SeccompFilter

pub fn from_profile(profile: SeccompProfile) -> Self

Create filter from profile

pub fn minimal() -> Self

Create minimal filter

pub fn allow_syscall(&mut self, name: impl Into<String>)

Add syscall to whitelist

pub fn block_syscall(&mut self, name: impl Into<String>)

Block a syscall (deny even if in whitelist)

pub fn is_allowed(&self, name: &str) -> bool

Check if syscall is allowed

pub fn allowed_syscalls(&self) -> &HashSet<String>

Get allowed syscalls

pub fn blocked_syscalls(&self) -> &HashSet<String>

Get blocked syscalls

pub fn allowed_count(&self) -> usize

Count allowed syscalls

pub fn is_kill_on_violation(&self) -> bool

Check if killing on violation

pub fn set_kill_on_violation(&mut self, kill: bool)

Set kill on violation

pub fn profile(&self) -> SeccompProfile

Get the profile used to create this filter

pub fn set_allow_unknown_syscalls(&mut self, allow: bool)

Set whether unknown syscalls should be allowed (warnings only)

Default is false, which means unknown syscalls cause compilation errors. Setting this to true allows filters with unknown syscalls to compile, but those syscalls will be silently ignored.

pub fn allows_unknown_syscalls(&self) -> bool

Check if unknown syscalls are allowed

pub fn validate(&self) -> Result<()>

Validate that filter is correct

pub fn export(&self) -> Result<Vec<String>>

Export as BPF program (simplified - just returns syscall names)

Trait Implementations

impl Clone for SeccompFilter

fn clone(&self) -> SeccompFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.