Enum SeccompProfile 

pub enum SeccompProfile {
    Minimal,
    IoHeavy,
    Compute,
    Network,
    Unrestricted,
}

Seccomp filter profile

Variants

Minimal

Minimal profile - only essential syscalls

IoHeavy

IO-heavy profile - includes file operations

Compute

Compute profile - includes memory operations

Network

Network profile - includes socket operations

Unrestricted

Unrestricted - allow most syscalls

Implementations

impl SeccompProfile

pub fn all() -> Vec<Self>

Get all profiles

Examples found in repository

examples/seccomp_profiles.rs (line 10)

fn main() {
    println!("=== Sandbox RS - Seccomp Profiles ===\n");

    println!("Available seccomp profiles:\n");

    for profile in SeccompProfile::all() {
        println!("Profile: {:?}", profile);
        println!("  Description: {}", profile.description());

        // Note: Actual syscall filtering would require kernel-level seccomp
        // For now, we just demonstrate the API
        println!("  Note: Syscall filtering requires root and proper seccomp setup\n");
    }

    println!("\nProfile Usage Example:");
    println!("  let sandbox = SandboxBuilder::new(\"my-box\")");
    println!("    .seccomp_profile(SeccompProfile::IoHeavy)");
    println!("    .build()?;");
}

pub fn description(&self) -> &'static str

Get description of profile

Examples found in repository

examples/seccomp_profiles.rs (line 12)

fn main() {
    println!("=== Sandbox RS - Seccomp Profiles ===\n");

    println!("Available seccomp profiles:\n");

    for profile in SeccompProfile::all() {
        println!("Profile: {:?}", profile);
        println!("  Description: {}", profile.description());

        // Note: Actual syscall filtering would require kernel-level seccomp
        // For now, we just demonstrate the API
        println!("  Note: Syscall filtering requires root and proper seccomp setup\n");
    }

    println!("\nProfile Usage Example:");
    println!("  let sandbox = SandboxBuilder::new(\"my-box\")");
    println!("    .seccomp_profile(SeccompProfile::IoHeavy)");
    println!("    .build()?;");
}

Trait Implementations

impl Clone for SeccompProfile

fn clone(&self) -> SeccompProfile

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompProfile

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for SeccompProfile

fn eq(&self, other: &SeccompProfile) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Eq for SeccompProfile

impl StructuralPartialEq for SeccompProfile