From 457fd9ef96706f90f809e72c72157d8c87530922 Mon Sep 17 00:00:00 2001
From: Praveen K Paladugu <prapal@linux.microsoft.com>
Date: Wed, 12 Jun 2024 11:59:30 +0000
Subject: [PATCH] vmm: enable landlock during live migration

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
---
 vmm/src/lib.rs | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/vmm/src/lib.rs b/vmm/src/lib.rs
index 2ec59f621..8a65e5e57 100644
--- a/vmm/src/lib.rs
+++ b/vmm/src/lib.rs
@@ -766,6 +766,19 @@ impl Vmm {
             MigratableError::MigrateReceive(anyhow!("Error creating console devices: {:?}", e))
         })?);
 
+        if self
+            .vm_config
+            .as_ref()
+            .unwrap()
+            .lock()
+            .unwrap()
+            .landlock_enable
+        {
+            apply_landlock(self.vm_config.as_ref().unwrap().clone()).map_err(|e| {
+                MigratableError::MigrateReceive(anyhow!("Error applying landlock: {:?}", e))
+            })?;
+        }
+
         let vm = Vm::create_hypervisor_vm(
             &self.hypervisor,
             #[cfg(feature = "tdx")]