Struct tabox::syscall_filter::SyscallFilter

pub struct SyscallFilter {
    pub default_action: SyscallFilterAction,
    pub rules: Vec<(String, SyscallFilterAction)>,
}

Syscall filter configuration

Fields

default_action: SyscallFilterAction

Default action to execute

rules: Vec<(String, SyscallFilterAction)>

Sandbox filter rules in the form of (syscall_name, action)

Methods

impl SyscallFilter

pub fn build(multiprocess: bool, chmod: bool) -> Self

Build a filter that blocks most dangerous syscalls

pub fn default_action(&mut self, action: SyscallFilterAction) -> &mut Self

Set the default filter action

pub fn add_rule<S: Into<String>>(
    &mut self,
    syscall: S,
    action: SyscallFilterAction
) -> &mut Self

Add a rule to the filter

Trait Implementations

impl Clone for SyscallFilter

fn clone(&self) -> SyscallFilter

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SyscallFilter

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Default for SyscallFilter

fn default() -> Self

Returns the "default value" for a type.

impl<'de> Deserialize<'de> for SyscallFilter

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl Serialize for SyscallFilter

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.