vmm: Introduce Landlock module

This module introduces methods to apply Landlock LSM to cloud-hypervisor
threads.

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
This commit is contained in:
Praveen K Paladugu
2024-02-12 19:06:43 +00:00
committed by Liu Wei
parent 1d89f98edf
commit af5a9677c8
4 changed files with 169 additions and 0 deletions

12
Cargo.lock generated
View File

@@ -1118,6 +1118,17 @@ dependencies = [
"vmm-sys-util",
]
[[package]]
name = "landlock"
version = "0.4.0"
source = "registry+https://github.com/rust-lang/crates.io-index"
checksum = "dafb8a4afee64f167eb2b52d32f0eea002e41a7a6450e68c799c8ec3a81a634c"
dependencies = [
"enumflags2",
"libc",
"thiserror",
]
[[package]]
name = "lazy_static"
version = "1.4.0"
@@ -2450,6 +2461,7 @@ dependencies = [
"hypervisor",
"igvm",
"igvm_defs",
"landlock",
"libc",
"linux-loader",
"log",