Enum oci_spec::runtime::LinuxSeccompFilterFlag

pub enum LinuxSeccompFilterFlag {
    SeccompFilterFlagLog,
    SeccompFilterFlagTsync,
    SeccompFilterFlagSpecAllow,
}

Available seccomp filter flags.

Variants

SeccompFilterFlagLog

All filter return actions except SECCOMP_RET_ALLOW should be logged. An administrator may override this filter flag by preventing specific actions from being logged via the /proc/sys/kernel/seccomp/actions_logged file. (since Linux 4.14)

SeccompFilterFlagTsync

When adding a new filter, synchronize all other threads of the calling process to the same seccomp filter tree. A “filter tree” is the ordered list of filters attached to a thread. (Attaching identical filters in separate seccomp() calls results in different filters from this perspective.)

If any thread cannot synchronize to the same filter tree, the call will not attach the new seccomp filter, and will fail, returning the first thread ID found that cannot synchronize. Synchronization will fail if another thread in the same process is in SECCOMP_MODE_STRICT or if it has attached new seccomp filters to itself, diverging from the calling thread’s filter tree.

SeccompFilterFlagSpecAllow

Disable Speculative Store Bypass mitigation. (since Linux 4.17)

Trait Implementations

impl Clone for LinuxSeccompFilterFlag

fn clone(&self) -> LinuxSeccompFilterFlag

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for LinuxSeccompFilterFlag

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for LinuxSeccompFilterFlag

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for LinuxSeccompFilterFlag

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl FromStr for LinuxSeccompFilterFlag

type Err = ParseError

The associated error which can be returned from parsing.

fn from_str(s: &str) -> Result<LinuxSeccompFilterFlag, <Self as FromStr>::Err>

Parses a string s to return a value of this type.

impl PartialEq for LinuxSeccompFilterFlag

fn eq(&self, other: &LinuxSeccompFilterFlag) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for LinuxSeccompFilterFlag

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl TryFrom<&str> for LinuxSeccompFilterFlag

type Error = ParseError

The type returned in the event of a conversion error.

fn try_from( s: &str, ) -> Result<LinuxSeccompFilterFlag, <Self as TryFrom<&str>>::Error>

Performs the conversion.

impl Copy for LinuxSeccompFilterFlag

impl Eq for LinuxSeccompFilterFlag

impl StructuralPartialEq for LinuxSeccompFilterFlag