Struct gaol::platform::linux::seccomp::Filter

pub struct Filter {
    program: Vec<sock_filter>,
}

Fields

program: Vec<sock_filter>

Implementations

impl Filter

pub fn new(profile: &Profile) -> Filter

pub fn dump(&self)

pub fn activate(&self) -> Result<(), c_int>

Activates this filter, applying all of its restrictions forevermore. This can only be done once.

fn allow_this_syscall(&mut self)

fn allow_syscalls(&mut self, syscalls: &[u32])

fn if_syscall_is<F>(&mut self, number: u32, then: F)

where F: FnMut(&mut Filter),

fn if_arg0_is<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),

fn if_arg1_is<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),

fn if_arg1_hasnt_set<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),

fn if_arg2_is<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),

fn if_k_is<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),

fn if_k_hasnt_set<F>(&mut self, value: u32, then: F)

where F: FnMut(&mut Filter),