diff options
| author | Stefan Hajnoczi | 2019-10-16 18:01:56 +0200 |
|---|---|---|
| committer | Dr. David Alan Gilbert | 2020-01-23 17:41:36 +0100 |
| commit | d74830d12ae233186ff74ddf64c552d26bb39e50 (patch) | |
| tree | fc4d8b4b4eb2bf1b52e8dbfdf8107285b7611877 /linux-user | |
| parent | virtiofsd: sandbox mount namespace (diff) | |
| download | qemu-d74830d12ae233186ff74ddf64c552d26bb39e50.tar.gz qemu-d74830d12ae233186ff74ddf64c552d26bb39e50.tar.xz qemu-d74830d12ae233186ff74ddf64c552d26bb39e50.zip | |
virtiofsd: move to an empty network namespace
If the process is compromised there should be no network access. Use an
empty network namespace to sandbox networking.
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Diffstat (limited to 'linux-user')
0 files changed, 0 insertions, 0 deletions