Struct SeccompState 

pub struct SeccompState { /* private fields */ }

Per-process state that cannot be stored in the container (e.g., whether there is a container).

Implementations

impl SeccompState

pub fn from(state: &SeccompState) -> SeccompState

pub fn get(&self) -> SeccompStateValue

pub fn set(&self, state: &SeccompStateValue) -> Result<(), Errno>

pub fn do_strict( locked: &mut Locked<Unlocked>, task: &Task, syscall: &Syscall, ) -> Option<Result<SyscallResult, Errno>>

Check to see if this syscall is allowed in STRICT mode, and, if not, send the current task a SIGKILL.

pub fn do_user_defined( locked: &mut Locked<Unlocked>, result: SeccompFilterResult, current_task: &mut CurrentTask, syscall: &Syscall, ) -> Option<Result<SyscallResult, Errno>>

Take the given |action| on the given |task|. The action is one of the SECCOMP_RET values (ALLOW, LOG, KILL, KILL_PROCESS, TRAP, ERRNO, USER_NOTIF, TRACE). |task| is the thread that invoked the syscall, and |syscall| is the syscall that was invoked. Returns the result that the syscall will be forced to return by this filter, or None, if the syscall should return its actual return value.

Trait Implementations

impl Default for SeccompState

fn default() -> SeccompState

Returns the “default value” for a type.