cloud-hypervisor/vmm/src
Praveen K Paladugu 249e362c70 vmm: Enable Landlock on vmm thread
Add file/dir paths from landlock-rules arguments to ruleset. Invoke
apply_landlock on VmConfig to apply config specific rules to ruleset.

Once done, any threads spawned by vmm thread will be automatically
sandboxed with the ruleset in vmm thread.

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
2024-07-06 04:42:58 +00:00
..
api vmm: Enable Landlock on http-server thread 2024-07-06 04:42:58 +00:00
igvm
acpi.rs
clone3.rs
config.rs vmm: Introduce Landlock module 2024-07-06 04:42:58 +00:00
console_devices.rs vmm: Use cloned fd to check if dev is a tty 2024-06-12 15:47:19 +00:00
coredump.rs
cpu.rs arch: Change the default topology for x86 guests 2024-06-04 17:08:18 +00:00
device_manager.rs vmm: cleanup legacy console device management 2024-06-12 15:47:19 +00:00
device_tree.rs
gdb.rs
interrupt.rs
landlock.rs vmm: Introduce ApplyLandlock trait 2024-07-06 04:42:58 +00:00
lib.rs vmm: Enable Landlock on vmm thread 2024-07-06 04:42:58 +00:00
memory_manager.rs vmm: fix documentation formatting 2024-06-12 16:59:20 +00:00
migration.rs
pci_segment.rs
seccomp_filters.rs vmm: Add seccomp rules to allow landlock syscalls 2024-07-06 04:42:58 +00:00
serial_manager.rs vmm: refactor DeviceManager to use console_info 2024-06-12 15:47:19 +00:00
sigwinch_listener.rs vmm: move listen_for_sigwinch_on_tty method 2024-06-12 15:47:19 +00:00
vm_config.rs vmm: Introduce ApplyLandlock trait 2024-07-06 04:42:58 +00:00
vm.rs vmm: Enable Landlock on vmm thread 2024-07-06 04:42:58 +00:00