Struct Table 

pub struct Table<'a> {
    pub abi: Abi,
    pub notify: &'a [i64],
    pub trace: &'a [i64],
    pub ns_flags: &'a [i64],
    pub refused: &'a [i64],
    pub dumpable: &'a [i64],
}

One ABI’s share of the filter: its audit arch and its number lists.

Fields

abi: Abi

notify: &'a [i64]

trace: &'a [i64]

ns_flags: &'a [i64]

Syscalls whose first argument is refused with EPERM when it carries a CLONE_NEW* bit (clone, unshare).

refused: &'a [i64]

Syscalls refused with EPERM outright (setns).

dumpable: &'a [i64]

prctl numbers whose PR_SET_DUMPABLE and PR_GET_DUMPABLE go to the listener; every other option is allowed.