Struct SeccompState 

pub struct SeccompState {
    pub mode: SeccompMode,
    pub filters: Vec<SeccompFilter>,
}

Per-process seccomp state.

Fields

mode: SeccompMode

Current mode.

filters: Vec<SeccompFilter>

Stack of filters (all evaluated, most restrictive wins).

Implementations

impl SeccompState

pub fn new() -> Self

pub fn install_filter( &mut self, filter: SeccompFilter, ) -> Result<(), KernelError>

Install a new filter. Mode transitions to Filter.

pub fn evaluate(&self, data: &SeccompData) -> u32

Evaluate all filters against the given syscall data. Returns the most restrictive action (lowest value wins per Linux semantics).

pub fn fork_inherit(&self) -> Self

Create a copy for a forked process (inherits filters marked for inheritance).

pub fn filter_count(&self) -> usize

Trait Implementations

impl Clone for SeccompState

fn clone(&self) -> SeccompState

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SeccompState

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SeccompState

Available on crate feature alloc only.

fn default() -> Self

Returns the “default value” for a type.