Enum InheritedSeccomp 

pub enum InheritedSeccomp {
    Unknown,
    Disabled,
    Strict,
    Filter(Option<u32>),
}

The seccomp state of the thread that starts the guest, which the guest inherits: every filter that thread has applies to the guest’s system calls, and to the calls Detcore injects into it. Detcore refuses the guest’s own seccomp(2) and prctl(PR_SET_SECCOMP), so these and the backend’s own filter are the only filters a guest has.

Variants

Unknown

Not measured, or not readable, so a filter may apply.

Disabled

No seccomp (Seccomp: 0).

Strict

Strict mode (Seccomp: 1).

Filter(Option<u32>)

Filter mode (Seccomp: 2), with the number of filters when Seccomp_filters gives it.

Implementations

impl InheritedSeccomp

pub fn measure() -> Self

The state of the calling thread, which a process it forks inherits, from /proc/thread-self/status.

pub fn parse(status: &str) -> Self

The state the Seccomp and Seccomp_filters lines of the text of a /proc/<pid>/status file give. A missing or unexpected Seccomp line is unknown.

Trait Implementations

impl Clone for InheritedSeccomp

fn clone(&self) -> InheritedSeccomp

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for InheritedSeccomp

impl Debug for InheritedSeccomp

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for InheritedSeccomp

fn default() -> InheritedSeccomp

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for InheritedSeccomp

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for InheritedSeccomp

impl Hash for InheritedSeccomp

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl PartialEq for InheritedSeccomp

fn eq(&self, other: &InheritedSeccomp) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for InheritedSeccomp

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for InheritedSeccomp