Struct greenhook::UNotifyEventRequest

pub struct UNotifyEventRequest { /* private fields */ }

UNotifyEventRequest is the type of parameter that user’s function would get.

Implementations

impl UNotifyEventRequest

pub fn get_request(&self) -> &ScmpNotifReq

Returns the unotify request (libseccomp::ScmpNotifReq) of this event.

pub unsafe fn continue_syscall(&self) -> ScmpNotifResp

Let the kernel continue the syscall.

Safety

CAUTION! This method is unsafe because it may suffer TOCTOU attack. Please read seccomp_unotify(2) “NOTES/Design goals; use of SECCOMP_USER_NOTIF_FLAG_CONTINUE” before using this method.

pub fn fail_syscall(&self, err: i32) -> ScmpNotifResp

Returns error to supervised process. err parameter should be a number larger than 0.

pub fn return_syscall(&self, val: i64) -> ScmpNotifResp

Returns value to supervised process.

pub fn is_valid(&self) -> bool

Check if this event is still valid. In some cases this is necessary, please check seccomp_unotify(2) for more information.

pub fn add_fd(&self, src_fd: RawFd) -> Result<RawFd, Error>

Add a file descriptor to the supervised process. This could help avoid TOCTOU attack in some cases.

Trait Implementations

impl Debug for UNotifyEventRequest

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.