[INFO] cloning repository https://github.com/sandtrace/sandtrace [INFO] running `Command { std: "git" "-c" "credential.helper=" "-c" "credential.helper=/workspace/cargo-home/bin/git-credential-null" "clone" "--bare" "https://github.com/sandtrace/sandtrace" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fsandtrace%2Fsandtrace", kill_on_drop: false }` [INFO] [stderr] Cloning into bare repository '/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fsandtrace%2Fsandtrace'... [INFO] running `Command { std: "git" "rev-parse" "HEAD", kill_on_drop: false }` [INFO] [stdout] 6adea1f2ad82f82e1e17d4f976263b3f6b581ae7 [INFO] checking sandtrace/sandtrace against try#b10dae361a61486cfbdcd3aae3877ee17e00d192 for pr-153912 [INFO] running `Command { std: "git" "clone" "/workspace/cache/git-repos/https%3A%2F%2Fgithub.com%2Fsandtrace%2Fsandtrace" "/workspace/builds/worker-7-tc2/source", kill_on_drop: false }` [INFO] [stderr] Cloning into '/workspace/builds/worker-7-tc2/source'... [INFO] [stderr] done. [INFO] started tweaking git repo https://github.com/sandtrace/sandtrace [INFO] finished tweaking git repo https://github.com/sandtrace/sandtrace [INFO] tweaked toml for git repo https://github.com/sandtrace/sandtrace written to /workspace/builds/worker-7-tc2/source/Cargo.toml [INFO] validating manifest of git repo https://github.com/sandtrace/sandtrace on toolchain b10dae361a61486cfbdcd3aae3877ee17e00d192 [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+b10dae361a61486cfbdcd3aae3877ee17e00d192" "metadata" "--manifest-path" "Cargo.toml" "--no-deps", kill_on_drop: false }` [INFO] crate git repo https://github.com/sandtrace/sandtrace already has a lockfile, it will not be regenerated [INFO] running `Command { std: CARGO_HOME="/workspace/cargo-home" RUSTUP_HOME="/workspace/rustup-home" "/workspace/cargo-home/bin/cargo" "+b10dae361a61486cfbdcd3aae3877ee17e00d192" "fetch" "--manifest-path" "Cargo.toml", kill_on_drop: false }` [INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+b10dae361a61486cfbdcd3aae3877ee17e00d192" "metadata" "--no-deps" "--format-version=1", kill_on_drop: false }` [INFO] [stdout] 1948e500bb4c30abdb6b5a583d1ef4a545bcb34ac704ab2837062462219b324a [INFO] running `Command { std: "docker" "start" "-a" "1948e500bb4c30abdb6b5a583d1ef4a545bcb34ac704ab2837062462219b324a", kill_on_drop: false }` [INFO] running `Command { std: "docker" "inspect" "1948e500bb4c30abdb6b5a583d1ef4a545bcb34ac704ab2837062462219b324a", kill_on_drop: false }` [INFO] running `Command { std: "docker" "rm" "-f" "1948e500bb4c30abdb6b5a583d1ef4a545bcb34ac704ab2837062462219b324a", kill_on_drop: false }` [INFO] [stdout] 1948e500bb4c30abdb6b5a583d1ef4a545bcb34ac704ab2837062462219b324a [INFO] running `Command { std: "docker" "create" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/target:/opt/rustwide/target:rw,Z" "-v" "/var/lib/crater-agent-workspace/builds/worker-7-tc2/source:/opt/rustwide/workdir:ro,Z" "-v" "/var/lib/crater-agent-workspace/cargo-home:/opt/rustwide/cargo-home:ro,Z" "-v" "/var/lib/crater-agent-workspace/rustup-home:/opt/rustwide/rustup-home:ro,Z" "-e" "SOURCE_DIR=/opt/rustwide/workdir" "-e" "CARGO_TARGET_DIR=/opt/rustwide/target" "-e" "CARGO_INCREMENTAL=0" "-e" "RUST_BACKTRACE=full" "-e" "RUSTFLAGS=--cap-lints=forbid" "-e" "RUSTDOCFLAGS=--cap-lints=forbid" "-e" "CARGO_HOME=/opt/rustwide/cargo-home" "-e" "RUSTUP_HOME=/opt/rustwide/rustup-home" "-w" "/opt/rustwide/workdir" "-m" "1610612736" "--user" "0:0" "--network" "none" "ghcr.io/rust-lang/crates-build-env/linux@sha256:d429b63d4308055ea97f60fb1d3dfca48854a00942f1bd2ad806beaf015945ec" "/opt/rustwide/cargo-home/bin/cargo" "+b10dae361a61486cfbdcd3aae3877ee17e00d192" "check" "--frozen" "--all" "--all-targets" "--message-format=json", kill_on_drop: false }` [INFO] [stdout] 7a5423a095c4f73332b039221a9d11878121a066bf6f6bfc8b50da6408b61605 [INFO] running `Command { std: "docker" "start" "-a" "7a5423a095c4f73332b039221a9d11878121a066bf6f6bfc8b50da6408b61605", kill_on_drop: false }` [INFO] [stderr] Compiling libc v0.2.182 [INFO] [stderr] Checking tracing-core v0.1.36 [INFO] [stderr] Compiling zerocopy v0.8.42 [INFO] [stderr] Compiling serde_core v1.0.228 [INFO] [stderr] Compiling serde_derive v1.0.228 [INFO] [stderr] Compiling synstructure v0.13.2 [INFO] [stderr] Compiling tokio-macros v2.6.1 [INFO] [stderr] Compiling tracing-attributes v0.1.31 [INFO] [stderr] Compiling zerovec-derive v0.11.2 [INFO] [stderr] Compiling displaydoc v0.2.5 [INFO] [stderr] Compiling futures-macro v0.3.32 [INFO] [stderr] Compiling enumflags2_derive v0.7.12 [INFO] [stderr] Compiling toml_parser v1.0.9+spec-1.1.0 [INFO] [stderr] Compiling ring v0.17.14 [INFO] [stderr] Checking aho-corasick v1.1.4 [INFO] [stderr] Compiling rustix v1.1.4 [INFO] [stderr] Checking digest v0.10.7 [INFO] [stderr] Checking linux-raw-sys v0.12.1 [INFO] [stderr] Checking serde_json v1.0.149 [INFO] [stderr] Compiling rustls v0.23.37 [INFO] [stderr] Checking futures-util v0.3.32 [INFO] [stderr] Checking md-5 v0.10.6 [INFO] [stderr] Compiling zerofrom-derive v0.1.6 [INFO] [stderr] Compiling yoke-derive v0.8.1 [INFO] [stderr] Compiling async-trait v0.1.89 [INFO] [stderr] Checking sha2 v0.10.9 [INFO] [stderr] Compiling toml_edit v0.25.3+spec-1.1.0 [INFO] [stderr] Checking regex-automata v0.4.14 [INFO] [stderr] Compiling pest v2.8.6 [INFO] [stderr] Checking hmac v0.12.1 [INFO] [stderr] Checking fallible-iterator v0.2.0 [INFO] [stderr] Checking tracing v0.1.44 [INFO] [stderr] Compiling nix v0.31.2 [INFO] [stderr] Checking phf_shared v0.13.1 [INFO] [stderr] Compiling proc-macro-crate v3.5.0 [INFO] [stderr] Checking webpki-roots v1.0.6 [INFO] [stderr] Checking simd-adler32 v0.3.8 [INFO] [stderr] Compiling rustix v0.38.44 [INFO] [stderr] Checking phf v0.13.1 [INFO] [stderr] Checking miniz_oxide v0.8.9 [INFO] [stderr] Compiling snafu-derive v0.8.9 [INFO] [stderr] Checking errno v0.3.14 [INFO] [stderr] Checking mio v1.1.1 [INFO] [stderr] Checking parking_lot_core v0.9.12 [INFO] [stderr] Checking socket2 v0.6.2 [INFO] [stderr] Checking signal-hook-registry v1.4.8 [INFO] [stderr] Checking zerofrom v0.1.6 [INFO] [stderr] Checking getrandom v0.2.17 [INFO] [stderr] Checking getrandom v0.3.4 [INFO] [stderr] Checking parking_lot v0.12.5 [INFO] [stderr] Checking rand_core v0.9.5 [INFO] [stderr] Checking yoke v0.8.1 [INFO] [stderr] Checking getrandom v0.4.2 [INFO] [stderr] Checking inotify-sys v0.1.5 [INFO] [stderr] Checking num_cpus v1.17.0 [INFO] [stderr] Checking zerovec v0.11.5 [INFO] [stderr] Checking zerotrie v0.2.3 [INFO] [stderr] Checking whoami v2.1.1 [INFO] [stderr] Checking rand_core v0.6.4 [INFO] [stderr] Checking uuid v1.21.0 [INFO] [stderr] Compiling serde_repr v0.1.20 [INFO] [stderr] Compiling async-recursion v1.1.1 [INFO] [stderr] Compiling thiserror-impl v2.0.18 [INFO] [stderr] Compiling pest_meta v2.8.6 [INFO] [stderr] Checking tokio v1.50.0 [INFO] [stderr] Compiling serde_yml v0.0.12 [INFO] [stderr] Checking instant v0.1.13 [INFO] [stderr] Checking clap_lex v1.0.0 [INFO] [stderr] Compiling procfs v0.17.0 [INFO] [stderr] Checking notify-types v1.0.1 [INFO] [stderr] Checking axum-core v0.5.6 [INFO] [stderr] Checking clap_builder v4.5.60 [INFO] [stderr] Checking ppv-lite86 v0.2.21 [INFO] [stderr] Checking inotify v0.10.2 [INFO] [stderr] Checking futures-executor v0.3.32 [INFO] [stderr] Checking tinystr v0.8.2 [INFO] [stderr] Checking potential_utf v0.1.4 [INFO] [stderr] Compiling pest_generator v2.8.6 [INFO] [stderr] Checking snafu v0.8.9 [INFO] [stderr] Checking serde v1.0.228 [INFO] [stderr] Checking icu_locale_core v2.1.1 [INFO] [stderr] Checking icu_collections v2.1.1 [INFO] [stderr] Checking rand_chacha v0.9.0 [INFO] [stderr] Checking rustls-webpki v0.103.9 [INFO] [stderr] Checking rand v0.9.2 [INFO] [stderr] Checking rand_chacha v0.3.1 [INFO] [stderr] Checking thiserror v2.0.18 [INFO] [stderr] Checking futures v0.3.32 [INFO] [stderr] Checking signal-hook v0.3.18 [INFO] [stderr] Checking flate2 v1.1.9 [INFO] [stderr] Checking rand v0.8.5 [INFO] [stderr] Checking chrono v0.4.44 [INFO] [stderr] Checking enumflags2 v0.7.12 [INFO] [stderr] Checking regex v1.12.3 [INFO] [stderr] Checking icu_provider v2.1.1 [INFO] [stderr] Checking zvariant_utils v3.3.0 [INFO] [stderr] Checking bstr v1.12.1 [INFO] [stderr] Checking serde_urlencoded v0.7.1 [INFO] [stderr] Checking icu_normalizer v2.1.1 [INFO] [stderr] Checking icu_properties v2.1.2 [INFO] [stderr] Checking toml_datetime v0.6.11 [INFO] [stderr] Checking postgres-protocol v0.6.10 [INFO] [stderr] Checking serde_spanned v0.6.9 [INFO] [stderr] Compiling pest_derive v2.8.6 [INFO] [stderr] Checking env_filter v1.0.0 [INFO] [stderr] Checking quick-xml v0.37.5 [INFO] [stderr] Checking filetime v0.2.27 [INFO] [stderr] Checking globset v0.4.18 [INFO] [stderr] Checking toml_edit v0.22.27 [INFO] [stderr] Compiling zvariant_derive v5.10.0 [INFO] [stderr] Checking libyml v0.0.5 [INFO] [stderr] Compiling clap_derive v4.5.55 [INFO] [stderr] Checking serde_path_to_error v0.1.20 [INFO] [stderr] Checking jiff v0.2.23 [INFO] [stderr] Checking humantime v2.3.0 [INFO] [stderr] Checking ignore v0.4.25 [INFO] [stderr] Checking postgres-types v0.2.12 [INFO] [stderr] Checking procfs-core v0.17.0 [INFO] [stderr] Checking idna_adapter v1.2.1 [INFO] [stderr] Checking idna v1.1.0 [INFO] [stderr] Checking json5 v0.4.1 [INFO] [stderr] Compiling zvariant v5.10.0 [INFO] [stderr] Checking notify v7.0.0 [INFO] [stderr] Checking polling v3.11.0 [INFO] [stderr] Checking tempfile v3.26.0 [INFO] [stderr] Checking url v2.5.8 [INFO] [stderr] Checking async-io v2.6.0 [INFO] [stderr] Checking ulid v1.2.1 [INFO] [stderr] Checking landlock v0.4.4 [INFO] [stderr] Checking capctl v0.2.4 [INFO] [stderr] Checking seccompiler v0.5.0 [INFO] [stderr] Checking glob v0.3.3 [INFO] [stderr] Checking predicates-core v1.0.10 [INFO] [stderr] Checking wait-timeout v0.2.1 [INFO] [stderr] Checking predicates-tree v1.0.13 [INFO] [stderr] Checking predicates v3.1.4 [INFO] [stderr] Checking ctrlc v3.5.2 [INFO] [stderr] Checking async-signal v0.2.13 [INFO] [stderr] Checking tokio-util v0.7.18 [INFO] [stderr] Checking tower v0.5.3 [INFO] [stderr] Checking deadpool-runtime v0.1.4 [INFO] [stderr] Checking signal-hook-tokio v0.3.1 [INFO] [stderr] Checking inotify v0.11.0 [INFO] [stderr] Checking async-process v2.5.0 [INFO] [stderr] Checking deadpool v0.12.3 [INFO] [stderr] Checking assert_cmd v2.1.2 [INFO] [stderr] Checking clap v4.5.60 [INFO] [stderr] Checking tokio-rustls v0.26.4 [INFO] [stderr] Checking h2 v0.4.13 [INFO] [stderr] Checking tokio-postgres v0.7.16 [INFO] [stderr] Checking tower-http v0.6.8 [INFO] [stderr] Checking toml v0.8.23 [INFO] [stderr] Compiling zbus_names v4.3.1 [INFO] [stderr] Compiling zbus_macros v5.14.0 [INFO] [stderr] Checking env_logger v0.11.9 [INFO] [stderr] Checking deadpool-postgres v0.14.1 [INFO] [stderr] Checking zbus v5.14.0 [INFO] [stderr] Checking hyper v1.8.1 [INFO] [stderr] Checking hyper-util v0.1.20 [INFO] [stderr] Checking hyper-rustls v0.27.7 [INFO] [stderr] Checking axum v0.8.8 [INFO] [stderr] Checking reqwest v0.12.28 [INFO] [stderr] Checking object_store v0.11.2 [INFO] [stderr] Checking notify-rust v4.12.0 [INFO] [stderr] Checking sandtrace v0.3.0 (/opt/rustwide/workdir) [INFO] [stdout] warning: fields `kind`, `owner`, `repo`, and `pull_request_number` are never read [INFO] [stdout] --> src/bin/sandtrace-runtime-worker.rs:31:5 [INFO] [stdout] | [INFO] [stdout] 30 | struct SourcePayload { [INFO] [stdout] | ------------- fields in this struct [INFO] [stdout] 31 | kind: String, [INFO] [stdout] | ^^^^ [INFO] [stdout] 32 | repo_url: String, [INFO] [stdout] 33 | owner: Option, [INFO] [stdout] | ^^^^^ [INFO] [stdout] 34 | repo: Option, [INFO] [stdout] | ^^^^ [INFO] [stdout] ... [INFO] [stdout] 39 | pull_request_number: Option, [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `SourcePayload` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: fields `kind`, `owner`, `repo`, and `pull_request_number` are never read [INFO] [stdout] --> src/bin/sandtrace-runtime-worker.rs:31:5 [INFO] [stdout] | [INFO] [stdout] 30 | struct SourcePayload { [INFO] [stdout] | ------------- fields in this struct [INFO] [stdout] 31 | kind: String, [INFO] [stdout] | ^^^^ [INFO] [stdout] 32 | repo_url: String, [INFO] [stdout] 33 | owner: Option, [INFO] [stdout] | ^^^^^ [INFO] [stdout] 34 | repo: Option, [INFO] [stdout] | ^^^^ [INFO] [stdout] ... [INFO] [stdout] 39 | pull_request_number: Option, [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `SourcePayload` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused imports: `PolicyError` and `Result` [INFO] [stdout] --> src/policy/mod.rs:1:20 [INFO] [stdout] | [INFO] [stdout] 1 | use crate::error::{PolicyError, Result}; [INFO] [stdout] | ^^^^^^^^^^^ ^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unused_imports)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `SyscallCategory` [INFO] [stdout] --> src/policy/mod.rs:2:34 [INFO] [stdout] | [INFO] [stdout] 2 | use crate::event::{PolicyAction, SyscallCategory}; [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `std::collections::HashSet` [INFO] [stdout] --> src/policy/mod.rs:4:5 [INFO] [stdout] | [INFO] [stdout] 4 | use std::collections::HashSet; [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `PathBuf` [INFO] [stdout] --> src/policy/mod.rs:5:23 [INFO] [stdout] | [INFO] [stdout] 5 | use std::path::{Path, PathBuf}; [INFO] [stdout] | ^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused imports: `PolicyEvaluator` and `RuleMatch` [INFO] [stdout] --> src/policy/mod.rs:11:17 [INFO] [stdout] | [INFO] [stdout] 11 | pub use rules::{PolicyEvaluator, RuleMatch}; [INFO] [stdout] | ^^^^^^^^^^^^^^^ ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `crate::policy::Policy` [INFO] [stdout] --> src/tracer/mod.rs:7:5 [INFO] [stdout] | [INFO] [stdout] 7 | use crate::policy::Policy; [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `TracerError` [INFO] [stdout] --> src/tracer/arch/mod.rs:1:28 [INFO] [stdout] | [INFO] [stdout] 1 | use crate::error::{Result, TracerError}; [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `nix::sys::ptrace` [INFO] [stdout] --> src/tracer/arch/x86_64.rs:4:5 [INFO] [stdout] | [INFO] [stdout] 4 | use nix::sys::ptrace; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `nix::sys::ptrace` [INFO] [stdout] --> src/tracer/arch/x86_64.rs:90:9 [INFO] [stdout] | [INFO] [stdout] 90 | use nix::sys::ptrace; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `RawRegisters` [INFO] [stdout] --> src/tracer/syscalls.rs:3:37 [INFO] [stdout] | [INFO] [stdout] 3 | pub use super::arch::{Architecture, RawRegisters}; [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `RawRegisters` [INFO] [stdout] --> src/tracer/mod.rs:26:26 [INFO] [stdout] | [INFO] [stdout] 26 | use arch::{Architecture, RawRegisters}; [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: use of deprecated constant `libc::SOCK_PACKET`: AF_PACKET must be used instead [INFO] [stdout] --> src/tracer/decoder.rs:316:15 [INFO] [stdout] | [INFO] [stdout] 316 | libc::SOCK_PACKET => parts.push("SOCK_PACKET"), [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(deprecated)]` on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused imports: `PolicyError` and `Result` [INFO] [stdout] --> src/policy/mod.rs:1:20 [INFO] [stdout] | [INFO] [stdout] 1 | use crate::error::{PolicyError, Result}; [INFO] [stdout] | ^^^^^^^^^^^ ^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unused_imports)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `SyscallCategory` [INFO] [stdout] --> src/policy/mod.rs:2:34 [INFO] [stdout] | [INFO] [stdout] 2 | use crate::event::{PolicyAction, SyscallCategory}; [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `std::collections::HashSet` [INFO] [stdout] --> src/policy/mod.rs:4:5 [INFO] [stdout] | [INFO] [stdout] 4 | use std::collections::HashSet; [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `PathBuf` [INFO] [stdout] --> src/policy/mod.rs:5:23 [INFO] [stdout] | [INFO] [stdout] 5 | use std::path::{Path, PathBuf}; [INFO] [stdout] | ^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused imports: `PolicyEvaluator` and `RuleMatch` [INFO] [stdout] --> src/policy/mod.rs:11:17 [INFO] [stdout] | [INFO] [stdout] 11 | pub use rules::{PolicyEvaluator, RuleMatch}; [INFO] [stdout] | ^^^^^^^^^^^^^^^ ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `crate::policy::Policy` [INFO] [stdout] --> src/tracer/mod.rs:7:5 [INFO] [stdout] | [INFO] [stdout] 7 | use crate::policy::Policy; [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `TracerError` [INFO] [stdout] --> src/tracer/arch/mod.rs:1:28 [INFO] [stdout] | [INFO] [stdout] 1 | use crate::error::{Result, TracerError}; [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `nix::sys::ptrace` [INFO] [stdout] --> src/tracer/arch/x86_64.rs:4:5 [INFO] [stdout] | [INFO] [stdout] 4 | use nix::sys::ptrace; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `nix::sys::ptrace` [INFO] [stdout] --> src/tracer/arch/x86_64.rs:90:9 [INFO] [stdout] | [INFO] [stdout] 90 | use nix::sys::ptrace; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `RawRegisters` [INFO] [stdout] --> src/tracer/syscalls.rs:3:37 [INFO] [stdout] | [INFO] [stdout] 3 | pub use super::arch::{Architecture, RawRegisters}; [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `RawRegisters` [INFO] [stdout] --> src/tracer/mod.rs:26:26 [INFO] [stdout] | [INFO] [stdout] 26 | use arch::{Architecture, RawRegisters}; [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: use of deprecated constant `libc::SOCK_PACKET`: AF_PACKET must be used instead [INFO] [stdout] --> src/tracer/decoder.rs:316:15 [INFO] [stdout] | [INFO] [stdout] 316 | libc::SOCK_PACKET => parts.push("SOCK_PACKET"), [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(deprecated)]` on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variant `Error` is never constructed [INFO] [stdout] --> src/bin/../runtime_orchestrator.rs:244:5 [INFO] [stdout] | [INFO] [stdout] 240 | enum GitHubStatusState { [INFO] [stdout] | ----------------- variant in this enum [INFO] [stdout] ... [INFO] [stdout] 244 | Error, [INFO] [stdout] | ^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `GitHubStatusState` has derived impls for the traits `Clone` and `Debug`, but these are intentionally ignored during dead code analysis [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `uploaded_at` is never read [INFO] [stdout] --> src/bin/../runtime_orchestrator.rs:310:5 [INFO] [stdout] | [INFO] [stdout] 306 | struct CompleteLeaseResult { [INFO] [stdout] | ------------------- field in this struct [INFO] [stdout] ... [INFO] [stdout] 310 | uploaded_at: Option, [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `CompleteLeaseResult` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variant `Error` is never constructed [INFO] [stdout] --> src/bin/../runtime_orchestrator.rs:244:5 [INFO] [stdout] | [INFO] [stdout] 240 | enum GitHubStatusState { [INFO] [stdout] | ----------------- variant in this enum [INFO] [stdout] ... [INFO] [stdout] 244 | Error, [INFO] [stdout] | ^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `GitHubStatusState` has derived impls for the traits `Clone` and `Debug`, but these are intentionally ignored during dead code analysis [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `uploaded_at` is never read [INFO] [stdout] --> src/bin/../runtime_orchestrator.rs:310:5 [INFO] [stdout] | [INFO] [stdout] 306 | struct CompleteLeaseResult { [INFO] [stdout] | ------------------- field in this struct [INFO] [stdout] ... [INFO] [stdout] 310 | uploaded_at: Option, [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `CompleteLeaseResult` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `std::io::Write` [INFO] [stdout] --> src/output/mod.rs:3:5 [INFO] [stdout] | [INFO] [stdout] 3 | use std::io::Write; [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused import: `std::io::Write` [INFO] [stdout] --> src/output/mod.rs:3:5 [INFO] [stdout] | [INFO] [stdout] 3 | use std::io::Write; [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:54:13 [INFO] [stdout] | [INFO] [stdout] 53 | super::RawRegisters::X86_64(r) => r.orig_rax, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 54 | _ => 0, [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unreachable_patterns)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:61:13 [INFO] [stdout] | [INFO] [stdout] 60 | super::RawRegisters::X86_64(r) => [r.rdi, r.rsi, r.rdx, r.r10, r.r8, r.r9], [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 61 | _ => [0; 6], [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:68:13 [INFO] [stdout] | [INFO] [stdout] 67 | super::RawRegisters::X86_64(r) => r.rax as i64, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 68 | _ => 0, [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:84:13 [INFO] [stdout] | [INFO] [stdout] 83 | super::RawRegisters::X86_64(r) => r.orig_rax = nr, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 84 | _ => {} [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `pid` [INFO] [stdout] --> src/tracer/mod.rs:312:9 [INFO] [stdout] | [INFO] [stdout] 312 | pid: Pid, [INFO] [stdout] | ^^^ help: if this is intentional, prefix it with an underscore: `_pid` [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unused_variables)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `syscall_nr` [INFO] [stdout] --> src/tracer/mod.rs:313:9 [INFO] [stdout] | [INFO] [stdout] 313 | syscall_nr: u64, [INFO] [stdout] | ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_syscall_nr` [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `args` [INFO] [stdout] --> src/tracer/mod.rs:315:9 [INFO] [stdout] | [INFO] [stdout] 315 | args: &[u64; 6], [INFO] [stdout] | ^^^^ help: if this is intentional, prefix it with an underscore: `_args` [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: type `TraceStats` is more private than the item `decode_syscall_args` [INFO] [stdout] --> src/tracer/decoder.rs:8:1 [INFO] [stdout] | [INFO] [stdout] 8 | / pub fn decode_syscall_args( [INFO] [stdout] 9 | | pid: Pid, [INFO] [stdout] 10 | | name: &str, [INFO] [stdout] 11 | | args: &[u64; 6], [INFO] [stdout] 12 | | stats: &mut TraceStats, [INFO] [stdout] 13 | | ) -> Option> { [INFO] [stdout] | |___________________________________^ function `decode_syscall_args` is reachable at visibility `pub(crate)` [INFO] [stdout] | [INFO] [stdout] note: but type `TraceStats` is only usable at visibility `pub(self)` [INFO] [stdout] --> src/tracer/mod.rs:44:1 [INFO] [stdout] | [INFO] [stdout] 44 | struct TraceStats { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^ [INFO] [stdout] = note: `#[warn(private_interfaces)]` on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `dispatch` is never used [INFO] [stdout] --> src/alert/mod.rs:49:18 [INFO] [stdout] | [INFO] [stdout] 20 | impl AlertRouter { [INFO] [stdout] | ---------------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 49 | pub async fn dispatch(&self, event: &RuleMatchEvent) -> Result<(), SandtraceError> { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: constant `REDACTION_MARKERS` is never used [INFO] [stdout] --> src/audit/scanner.rs:10:7 [INFO] [stdout] | [INFO] [stdout] 10 | const REDACTION_MARKERS: &[&str] = &[ [INFO] [stdout] | ^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `LandlockSetup`, `SeccompInstall`, `CapabilityDrop`, and `Exec` are never constructed [INFO] [stdout] --> src/error.rs:42:5 [INFO] [stdout] | [INFO] [stdout] 37 | pub enum SandboxError { [INFO] [stdout] | ------------ variants in this enum [INFO] [stdout] ... [INFO] [stdout] 42 | LandlockSetup(String), [INFO] [stdout] | ^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 45 | SeccompInstall(String), [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 48 | CapabilityDrop(String), [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 54 | Exec { [INFO] [stdout] | ^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `SandboxError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `UnknownSyscall` and `UnsupportedArch` are never constructed [INFO] [stdout] --> src/error.rs:83:5 [INFO] [stdout] | [INFO] [stdout] 68 | pub enum TracerError { [INFO] [stdout] | ----------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 83 | UnknownSyscall { number: u64, arch: String }, [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 89 | UnsupportedArch(String), [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `TracerError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `InvalidRule` and `GlobPattern` are never constructed [INFO] [stdout] --> src/error.rs:108:5 [INFO] [stdout] | [INFO] [stdout] 96 | pub enum PolicyError { [INFO] [stdout] | ----------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 108 | InvalidRule(String), [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 111 | GlobPattern { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `PolicyError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `WatchAdd`, `WatchRead`, and `DaemonFork` are never constructed [INFO] [stdout] --> src/error.rs:135:5 [INFO] [stdout] | [INFO] [stdout] 130 | pub enum WatchError { [INFO] [stdout] | ---------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 135 | WatchAdd { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 142 | WatchRead(#[source] std::io::Error), [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 145 | DaemonFork(String), [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `WatchError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `ScanFailed` and `FileRead` are never constructed [INFO] [stdout] --> src/error.rs:186:5 [INFO] [stdout] | [INFO] [stdout] 184 | pub enum AuditError { [INFO] [stdout] | ---------- variants in this enum [INFO] [stdout] 185 | #[error("Scan failed for {path}: {reason}")] [INFO] [stdout] 186 | ScanFailed { path: String, reason: String }, [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 189 | FileRead { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `AuditError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `timestamp` is never used [INFO] [stdout] --> src/event.rs:229:12 [INFO] [stdout] | [INFO] [stdout] 228 | impl TraceEvent { [INFO] [stdout] | --------------- method in this implementation [INFO] [stdout] 229 | pub fn timestamp(&self) -> DateTime { [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `no_color` is never read [INFO] [stdout] --> src/output/terminal.rs:12:5 [INFO] [stdout] | [INFO] [stdout] 10 | pub struct TerminalWriter { [INFO] [stdout] | -------------- field in this struct [INFO] [stdout] 11 | verbosity: u8, [INFO] [stdout] 12 | no_color: bool, [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `is_path_allowed` is never used [INFO] [stdout] --> src/policy/mod.rs:139:12 [INFO] [stdout] | [INFO] [stdout] 71 | impl Policy { [INFO] [stdout] | ----------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 139 | pub fn is_path_allowed(&self, path: &Path, access: PathAccess) -> PolicyAction { [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: enum `PathAccess` is never used [INFO] [stdout] --> src/policy/mod.rs:253:10 [INFO] [stdout] | [INFO] [stdout] 253 | pub enum PathAccess { [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `PolicyEvaluator` is never constructed [INFO] [stdout] --> src/policy/rules.rs:4:12 [INFO] [stdout] | [INFO] [stdout] 4 | pub struct PolicyEvaluator { [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `RuleMatch` is never constructed [INFO] [stdout] --> src/policy/rules.rs:9:12 [INFO] [stdout] | [INFO] [stdout] 9 | pub struct RuleMatch { [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: associated items `new`, `add_rule`, and `evaluate_syscall` are never used [INFO] [stdout] --> src/policy/rules.rs:15:12 [INFO] [stdout] | [INFO] [stdout] 14 | impl PolicyEvaluator { [INFO] [stdout] | -------------------- associated items in this implementation [INFO] [stdout] 15 | pub fn new() -> Self { [INFO] [stdout] | ^^^ [INFO] [stdout] ... [INFO] [stdout] 21 | pub fn add_rule(&mut self, syscall: String, action: PolicyAction) { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 25 | pub fn evaluate_syscall(&self, name: &str, category: SyscallCategory) -> RuleMatch { [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: methods `load_directories` and `rules` are never used [INFO] [stdout] --> src/rules/mod.rs:78:12 [INFO] [stdout] | [INFO] [stdout] 13 | impl RuleRegistry { [INFO] [stdout] | ----------------- methods in this implementation [INFO] [stdout] ... [INFO] [stdout] 78 | pub fn load_directories( [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 91 | pub fn rules(&self) -> &[DetectionRule] { [INFO] [stdout] | ^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `content_regexes` is never read [INFO] [stdout] --> src/rules/matcher.rs:16:5 [INFO] [stdout] | [INFO] [stdout] 12 | struct CompiledRule { [INFO] [stdout] | ------------ field in this struct [INFO] [stdout] ... [INFO] [stdout] 16 | content_regexes: Vec, [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `match_content` is never used [INFO] [stdout] --> src/rules/matcher.rs:92:12 [INFO] [stdout] | [INFO] [stdout] 21 | impl RuleMatcher { [INFO] [stdout] | ---------------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 92 | pub fn match_content(&self, file_path: &str, content: &str) -> Vec { [INFO] [stdout] | ^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `ContentMatch` is never constructed [INFO] [stdout] --> src/rules/matcher.rs:132:12 [INFO] [stdout] | [INFO] [stdout] 132 | pub struct ContentMatch { [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `drop_all_capabilities` is never used [INFO] [stdout] --> src/sandbox/capabilities.rs:13:8 [INFO] [stdout] | [INFO] [stdout] 13 | pub fn drop_all_capabilities() -> Result<()> { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_landlock_support` is never used [INFO] [stdout] --> src/sandbox/landlock.rs:14:8 [INFO] [stdout] | [INFO] [stdout] 14 | pub fn check_landlock_support() -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_namespace_support` is never used [INFO] [stdout] --> src/sandbox/namespaces.rs:70:8 [INFO] [stdout] | [INFO] [stdout] 70 | pub fn check_namespace_support() -> Result<()> { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_seccomp_support` is never used [INFO] [stdout] --> src/sandbox/seccomp.rs:14:8 [INFO] [stdout] | [INFO] [stdout] 14 | pub fn check_seccomp_support() -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: methods `name` and `syscall_category` are never used [INFO] [stdout] --> src/tracer/arch/mod.rs:11:8 [INFO] [stdout] | [INFO] [stdout] 10 | pub trait Architecture: Send + Sync { [INFO] [stdout] | ------------ methods in this trait [INFO] [stdout] 11 | fn name(&self) -> &'static str; [INFO] [stdout] | ^^^^ [INFO] [stdout] ... [INFO] [stdout] 16 | fn syscall_category(&self, nr: u64) -> SyscallCategory; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `categorize_syscall` is never used [INFO] [stdout] --> src/tracer/arch/x86_64.rs:181:4 [INFO] [stdout] | [INFO] [stdout] 181 | fn categorize_syscall(name: &str) -> SyscallCategory { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `read_struct` is never used [INFO] [stdout] --> src/tracer/memory.rs:121:8 [INFO] [stdout] | [INFO] [stdout] 121 | pub fn read_struct(pid: Pid, addr: u64) -> Result { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: fields `pid` and `exec_count` are never read [INFO] [stdout] --> src/tracer/state.rs:6:9 [INFO] [stdout] | [INFO] [stdout] 5 | pub struct ProcessState { [INFO] [stdout] | ------------ fields in this struct [INFO] [stdout] 6 | pub pid: Pid, [INFO] [stdout] | ^^^ [INFO] [stdout] ... [INFO] [stdout] 10 | pub exec_count: u64, [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `ProcessState` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `SyscallInfo` is never constructed [INFO] [stdout] --> src/tracer/syscalls.rs:7:12 [INFO] [stdout] | [INFO] [stdout] 7 | pub struct SyscallInfo { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `is_valid_syscall` is never used [INFO] [stdout] --> src/tracer/syscalls.rs:88:8 [INFO] [stdout] | [INFO] [stdout] 88 | pub fn is_valid_syscall(name: &str) -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `syscall_number_from_name` is never used [INFO] [stdout] --> src/tracer/syscalls.rs:95:8 [INFO] [stdout] | [INFO] [stdout] 95 | pub fn syscall_number_from_name(_name: &str) -> Option { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:54:13 [INFO] [stdout] | [INFO] [stdout] 53 | super::RawRegisters::X86_64(r) => r.orig_rax, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 54 | _ => 0, [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unreachable_patterns)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:61:13 [INFO] [stdout] | [INFO] [stdout] 60 | super::RawRegisters::X86_64(r) => [r.rdi, r.rsi, r.rdx, r.r10, r.r8, r.r9], [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 61 | _ => [0; 6], [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:68:13 [INFO] [stdout] | [INFO] [stdout] 67 | super::RawRegisters::X86_64(r) => r.rax as i64, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 68 | _ => 0, [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unreachable pattern [INFO] [stdout] --> src/tracer/arch/x86_64.rs:84:13 [INFO] [stdout] | [INFO] [stdout] 83 | super::RawRegisters::X86_64(r) => r.orig_rax = nr, [INFO] [stdout] | ------------------------------ matches all the relevant values [INFO] [stdout] 84 | _ => {} [INFO] [stdout] | ^ no value can reach this [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `pid` [INFO] [stdout] --> src/tracer/mod.rs:312:9 [INFO] [stdout] | [INFO] [stdout] 312 | pid: Pid, [INFO] [stdout] | ^^^ help: if this is intentional, prefix it with an underscore: `_pid` [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(unused_variables)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `syscall_nr` [INFO] [stdout] --> src/tracer/mod.rs:313:9 [INFO] [stdout] | [INFO] [stdout] 313 | syscall_nr: u64, [INFO] [stdout] | ^^^^^^^^^^ help: if this is intentional, prefix it with an underscore: `_syscall_nr` [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: unused variable: `args` [INFO] [stdout] --> src/tracer/mod.rs:315:9 [INFO] [stdout] | [INFO] [stdout] 315 | args: &[u64; 6], [INFO] [stdout] | ^^^^ help: if this is intentional, prefix it with an underscore: `_args` [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: type `TraceStats` is more private than the item `decode_syscall_args` [INFO] [stdout] --> src/tracer/decoder.rs:8:1 [INFO] [stdout] | [INFO] [stdout] 8 | / pub fn decode_syscall_args( [INFO] [stdout] 9 | | pid: Pid, [INFO] [stdout] 10 | | name: &str, [INFO] [stdout] 11 | | args: &[u64; 6], [INFO] [stdout] 12 | | stats: &mut TraceStats, [INFO] [stdout] 13 | | ) -> Option> { [INFO] [stdout] | |___________________________________^ function `decode_syscall_args` is reachable at visibility `pub(crate)` [INFO] [stdout] | [INFO] [stdout] note: but type `TraceStats` is only usable at visibility `pub(self)` [INFO] [stdout] --> src/tracer/mod.rs:44:1 [INFO] [stdout] | [INFO] [stdout] 44 | struct TraceStats { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^ [INFO] [stdout] = note: `#[warn(private_interfaces)]` on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `dispatch` is never used [INFO] [stdout] --> src/alert/mod.rs:49:18 [INFO] [stdout] | [INFO] [stdout] 20 | impl AlertRouter { [INFO] [stdout] | ---------------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 49 | pub async fn dispatch(&self, event: &RuleMatchEvent) -> Result<(), SandtraceError> { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `#[warn(dead_code)]` (part of `#[warn(unused)]`) on by default [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: constant `REDACTION_MARKERS` is never used [INFO] [stdout] --> src/audit/scanner.rs:10:7 [INFO] [stdout] | [INFO] [stdout] 10 | const REDACTION_MARKERS: &[&str] = &[ [INFO] [stdout] | ^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `LandlockSetup`, `SeccompInstall`, `CapabilityDrop`, and `Exec` are never constructed [INFO] [stdout] --> src/error.rs:42:5 [INFO] [stdout] | [INFO] [stdout] 37 | pub enum SandboxError { [INFO] [stdout] | ------------ variants in this enum [INFO] [stdout] ... [INFO] [stdout] 42 | LandlockSetup(String), [INFO] [stdout] | ^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 45 | SeccompInstall(String), [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 48 | CapabilityDrop(String), [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 54 | Exec { [INFO] [stdout] | ^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `SandboxError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `UnknownSyscall` and `UnsupportedArch` are never constructed [INFO] [stdout] --> src/error.rs:83:5 [INFO] [stdout] | [INFO] [stdout] 68 | pub enum TracerError { [INFO] [stdout] | ----------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 83 | UnknownSyscall { number: u64, arch: String }, [INFO] [stdout] | ^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 89 | UnsupportedArch(String), [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `TracerError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `InvalidRule` and `GlobPattern` are never constructed [INFO] [stdout] --> src/error.rs:108:5 [INFO] [stdout] | [INFO] [stdout] 96 | pub enum PolicyError { [INFO] [stdout] | ----------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 108 | InvalidRule(String), [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 111 | GlobPattern { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `PolicyError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `WatchAdd`, `WatchRead`, and `DaemonFork` are never constructed [INFO] [stdout] --> src/error.rs:135:5 [INFO] [stdout] | [INFO] [stdout] 130 | pub enum WatchError { [INFO] [stdout] | ---------- variants in this enum [INFO] [stdout] ... [INFO] [stdout] 135 | WatchAdd { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 142 | WatchRead(#[source] std::io::Error), [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 145 | DaemonFork(String), [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `WatchError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: variants `ScanFailed` and `FileRead` are never constructed [INFO] [stdout] --> src/error.rs:186:5 [INFO] [stdout] | [INFO] [stdout] 184 | pub enum AuditError { [INFO] [stdout] | ---------- variants in this enum [INFO] [stdout] 185 | #[error("Scan failed for {path}: {reason}")] [INFO] [stdout] 186 | ScanFailed { path: String, reason: String }, [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 189 | FileRead { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `AuditError` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `timestamp` is never used [INFO] [stdout] --> src/event.rs:229:12 [INFO] [stdout] | [INFO] [stdout] 228 | impl TraceEvent { [INFO] [stdout] | --------------- method in this implementation [INFO] [stdout] 229 | pub fn timestamp(&self) -> DateTime { [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `no_color` is never read [INFO] [stdout] --> src/output/terminal.rs:12:5 [INFO] [stdout] | [INFO] [stdout] 10 | pub struct TerminalWriter { [INFO] [stdout] | -------------- field in this struct [INFO] [stdout] 11 | verbosity: u8, [INFO] [stdout] 12 | no_color: bool, [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `is_path_allowed` is never used [INFO] [stdout] --> src/policy/mod.rs:139:12 [INFO] [stdout] | [INFO] [stdout] 71 | impl Policy { [INFO] [stdout] | ----------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 139 | pub fn is_path_allowed(&self, path: &Path, access: PathAccess) -> PolicyAction { [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: enum `PathAccess` is never used [INFO] [stdout] --> src/policy/mod.rs:253:10 [INFO] [stdout] | [INFO] [stdout] 253 | pub enum PathAccess { [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `PolicyEvaluator` is never constructed [INFO] [stdout] --> src/policy/rules.rs:4:12 [INFO] [stdout] | [INFO] [stdout] 4 | pub struct PolicyEvaluator { [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `RuleMatch` is never constructed [INFO] [stdout] --> src/policy/rules.rs:9:12 [INFO] [stdout] | [INFO] [stdout] 9 | pub struct RuleMatch { [INFO] [stdout] | ^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: associated items `new`, `add_rule`, and `evaluate_syscall` are never used [INFO] [stdout] --> src/policy/rules.rs:15:12 [INFO] [stdout] | [INFO] [stdout] 14 | impl PolicyEvaluator { [INFO] [stdout] | -------------------- associated items in this implementation [INFO] [stdout] 15 | pub fn new() -> Self { [INFO] [stdout] | ^^^ [INFO] [stdout] ... [INFO] [stdout] 21 | pub fn add_rule(&mut self, syscall: String, action: PolicyAction) { [INFO] [stdout] | ^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 25 | pub fn evaluate_syscall(&self, name: &str, category: SyscallCategory) -> RuleMatch { [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: methods `load_directories` and `rules` are never used [INFO] [stdout] --> src/rules/mod.rs:78:12 [INFO] [stdout] | [INFO] [stdout] 13 | impl RuleRegistry { [INFO] [stdout] | ----------------- methods in this implementation [INFO] [stdout] ... [INFO] [stdout] 78 | pub fn load_directories( [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] ... [INFO] [stdout] 91 | pub fn rules(&self) -> &[DetectionRule] { [INFO] [stdout] | ^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: field `content_regexes` is never read [INFO] [stdout] --> src/rules/matcher.rs:16:5 [INFO] [stdout] | [INFO] [stdout] 12 | struct CompiledRule { [INFO] [stdout] | ------------ field in this struct [INFO] [stdout] ... [INFO] [stdout] 16 | content_regexes: Vec, [INFO] [stdout] | ^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: method `match_content` is never used [INFO] [stdout] --> src/rules/matcher.rs:92:12 [INFO] [stdout] | [INFO] [stdout] 21 | impl RuleMatcher { [INFO] [stdout] | ---------------- method in this implementation [INFO] [stdout] ... [INFO] [stdout] 92 | pub fn match_content(&self, file_path: &str, content: &str) -> Vec { [INFO] [stdout] | ^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `ContentMatch` is never constructed [INFO] [stdout] --> src/rules/matcher.rs:132:12 [INFO] [stdout] | [INFO] [stdout] 132 | pub struct ContentMatch { [INFO] [stdout] | ^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `drop_all_capabilities` is never used [INFO] [stdout] --> src/sandbox/capabilities.rs:13:8 [INFO] [stdout] | [INFO] [stdout] 13 | pub fn drop_all_capabilities() -> Result<()> { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_landlock_support` is never used [INFO] [stdout] --> src/sandbox/landlock.rs:14:8 [INFO] [stdout] | [INFO] [stdout] 14 | pub fn check_landlock_support() -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_namespace_support` is never used [INFO] [stdout] --> src/sandbox/namespaces.rs:70:8 [INFO] [stdout] | [INFO] [stdout] 70 | pub fn check_namespace_support() -> Result<()> { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `check_seccomp_support` is never used [INFO] [stdout] --> src/sandbox/seccomp.rs:14:8 [INFO] [stdout] | [INFO] [stdout] 14 | pub fn check_seccomp_support() -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: methods `name` and `syscall_category` are never used [INFO] [stdout] --> src/tracer/arch/mod.rs:11:8 [INFO] [stdout] | [INFO] [stdout] 10 | pub trait Architecture: Send + Sync { [INFO] [stdout] | ------------ methods in this trait [INFO] [stdout] 11 | fn name(&self) -> &'static str; [INFO] [stdout] | ^^^^ [INFO] [stdout] ... [INFO] [stdout] 16 | fn syscall_category(&self, nr: u64) -> SyscallCategory; [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `categorize_syscall` is never used [INFO] [stdout] --> src/tracer/arch/x86_64.rs:181:4 [INFO] [stdout] | [INFO] [stdout] 181 | fn categorize_syscall(name: &str) -> SyscallCategory { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `read_struct` is never used [INFO] [stdout] --> src/tracer/memory.rs:121:8 [INFO] [stdout] | [INFO] [stdout] 121 | pub fn read_struct(pid: Pid, addr: u64) -> Result { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: fields `pid` and `exec_count` are never read [INFO] [stdout] --> src/tracer/state.rs:6:9 [INFO] [stdout] | [INFO] [stdout] 5 | pub struct ProcessState { [INFO] [stdout] | ------------ fields in this struct [INFO] [stdout] 6 | pub pid: Pid, [INFO] [stdout] | ^^^ [INFO] [stdout] ... [INFO] [stdout] 10 | pub exec_count: u64, [INFO] [stdout] | ^^^^^^^^^^ [INFO] [stdout] | [INFO] [stdout] = note: `ProcessState` has a derived impl for the trait `Debug`, but this is intentionally ignored during dead code analysis [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: struct `SyscallInfo` is never constructed [INFO] [stdout] --> src/tracer/syscalls.rs:7:12 [INFO] [stdout] | [INFO] [stdout] 7 | pub struct SyscallInfo { [INFO] [stdout] | ^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `is_valid_syscall` is never used [INFO] [stdout] --> src/tracer/syscalls.rs:88:8 [INFO] [stdout] | [INFO] [stdout] 88 | pub fn is_valid_syscall(name: &str) -> bool { [INFO] [stdout] | ^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stdout] warning: function `syscall_number_from_name` is never used [INFO] [stdout] --> src/tracer/syscalls.rs:95:8 [INFO] [stdout] | [INFO] [stdout] 95 | pub fn syscall_number_from_name(_name: &str) -> Option { [INFO] [stdout] | ^^^^^^^^^^^^^^^^^^^^^^^^ [INFO] [stdout] [INFO] [stdout] [INFO] [stderr] Finished `dev` profile [unoptimized + debuginfo] target(s) in 1m 12s [INFO] running `Command { std: "docker" "inspect" "7a5423a095c4f73332b039221a9d11878121a066bf6f6bfc8b50da6408b61605", kill_on_drop: false }` [INFO] running `Command { std: "docker" "rm" "-f" "7a5423a095c4f73332b039221a9d11878121a066bf6f6bfc8b50da6408b61605", kill_on_drop: false }` [INFO] [stdout] 7a5423a095c4f73332b039221a9d11878121a066bf6f6bfc8b50da6408b61605