Struct Compare 

pub struct Compare { /* private fields */ }

Comparison definition builder

Implementations

impl Compare

pub fn arg(arg_num: u32) -> Self

argument number, starting at 0

Examples found in repository

examples/setuid.rs (line 9)

fn main() {
        let mut ctx = Context::default(Action::Allow).unwrap();
        let rule = Rule::new(105 /* setuid on x86_64 */,
            Compare::arg(0)
                .with(1000)
                .using(Op::Eq)
                .build().unwrap(),
            Action::Errno(libc::EPERM) /* return EPERM */
        );
        ctx.add_rule(rule).unwrap();
        ctx.load().unwrap();
        let ret = unsafe { libc::setuid(1000) };
        println!("ret = {}, uid = {}", ret, unsafe { libc::getuid() });
}

pub fn using(self, op: Op) -> Self

Comparison operator

Examples found in repository

examples/setuid.rs (line 11)

fn main() {
        let mut ctx = Context::default(Action::Allow).unwrap();
        let rule = Rule::new(105 /* setuid on x86_64 */,
            Compare::arg(0)
                .with(1000)
                .using(Op::Eq)
                .build().unwrap(),
            Action::Errno(libc::EPERM) /* return EPERM */
        );
        ctx.add_rule(rule).unwrap();
        ctx.load().unwrap();
        let ret = unsafe { libc::setuid(1000) };
        println!("ret = {}, uid = {}", ret, unsafe { libc::getuid() });
}

pub fn with(self, datum: u64) -> Self

Datum to compare with

Examples found in repository

examples/setuid.rs (line 10)

fn main() {
        let mut ctx = Context::default(Action::Allow).unwrap();
        let rule = Rule::new(105 /* setuid on x86_64 */,
            Compare::arg(0)
                .with(1000)
                .using(Op::Eq)
                .build().unwrap(),
            Action::Errno(libc::EPERM) /* return EPERM */
        );
        ctx.add_rule(rule).unwrap();
        ctx.load().unwrap();
        let ret = unsafe { libc::setuid(1000) };
        println!("ret = {}, uid = {}", ret, unsafe { libc::getuid() });
}

pub fn and(self, datum: u64) -> Self

Second datum

pub fn build(self) -> Option<Cmp>

build comparison definition

Examples found in repository

examples/setuid.rs (line 12)

fn main() {
        let mut ctx = Context::default(Action::Allow).unwrap();
        let rule = Rule::new(105 /* setuid on x86_64 */,
            Compare::arg(0)
                .with(1000)
                .using(Op::Eq)
                .build().unwrap(),
            Action::Errno(libc::EPERM) /* return EPERM */
        );
        ctx.add_rule(rule).unwrap();
        ctx.load().unwrap();
        let ret = unsafe { libc::setuid(1000) };
        println!("ret = {}, uid = {}", ret, unsafe { libc::getuid() });
}