Struct TbfHeaderFilterDefaultAllow

pub struct TbfHeaderFilterDefaultAllow {}

An allow list system call filter based on the TBF header, with a default allow all fallback.

This will check if the process has TbfHeaderPermissions specified. If the process has TbfHeaderPermissions they will be used to determine access permissions. For details on this see the TockBinaryFormat documentation. If no permissions are specified the default is to allow the syscall.

Trait Implementations

impl SyscallFilter for TbfHeaderFilterDefaultAllow

Implement default SyscallFilter trait for filtering based on the TBF header.

fn filter_syscall( &self, process: &dyn Process, syscall: &Syscall, ) -> Result<(), ErrorCode>

Check the platform-provided system call filter for all non-yield system calls. If the system call is allowed for the provided process then return Ok(()). Otherwise, return Err() with an ErrorCode that will be returned to the calling application. The default implementation allows all system calls.