projects / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 5baa3b8) | patch
virtiofsd: move to an empty network namespace
authorStefan Hajnoczi <stefanha@redhat.com>
Wed, 16 Oct 2019 16:01:56 +0000 (17:01 +0100)
committerDr. David Alan Gilbert <dgilbert@redhat.com>
Thu, 23 Jan 2020 16:41:36 +0000 (16:41 +0000)
commitd74830d12ae233186ff74ddf64c552d26bb39e50
treefc4d8b4b4eb2bf1b52e8dbfdf8107285b7611877tree | snapshot
parent5baa3b8e95064c2434bd9e2f312edd5e9ae275dccommit | diff
virtiofsd: move to an empty network namespace

If the process is compromised there should be no network access.  Use an
empty network namespace to sandbox networking.

Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
tools/virtiofsd/passthrough_ll.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.