| commit | d74830d12ae233186ff74ddf64c552d26bb39e50 | |
| author | Stefan Hajnoczi <stefanha@redhat.com> | |
| Wed, 16 Oct 2019 16:01:56 +0000 (16 17:01 +0100) | ||
| committer | Dr. David Alan Gilbert <dgilbert@redhat.com> | |
| Thu, 23 Jan 2020 16:41:36 +0000 (23 16:41 +0000) | ||
| tree | fc4d8b4b4eb2bf1b52e8dbfdf8107285b7611877 | treesnapshot (tar.gz zip) |
| parent | 5baa3b8e95064c2434bd9e2f312edd5e9ae275dc | commitdiff |
virtiofsd: move to an empty network namespace
If the process is compromised there should be no network access. Use an
empty network namespace to sandbox networking.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
If the process is compromised there should be no network access. Use an
empty network namespace to sandbox networking.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
| tools/virtiofsd/passthrough_ll.c | diffblobblamehistory |