Struct SyscallFilter

pub struct SyscallFilter {
    pub default_action: SyscallFilterAction,
    pub rules: Vec<(String, SyscallFilterAction)>,
}

Syscall filter configuration

Fields

default_action: SyscallFilterAction

Default action to execute

rules: Vec<(String, SyscallFilterAction)>

Sandbox filter rules in the form of (syscall_name, action)

Implementations

impl SyscallFilter

pub fn build(multiprocess: bool, chmod: bool) -> Self

Build a filter that blocks most dangerous syscalls

pub fn default_action(&mut self, action: SyscallFilterAction) -> &mut Self

Set the default filter action

pub fn add_rule<S: Into<String>>( &mut self, syscall: S, action: SyscallFilterAction, ) -> &mut Self

Add a rule to the filter

Trait Implementations

impl Clone for SyscallFilter

fn clone(&self) -> SyscallFilter

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SyscallFilter

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SyscallFilter

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SyscallFilter

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SyscallFilter

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.