4 Commits

Author	SHA1	Message	Date
Praveen K Paladugu	7f6731cd05	vmm: Limit the visibility of Landlock objects ... Limit the visibility of objects and methods introduced by Landlock implementation. Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>	2024-07-06 04:42:58 +00:00
Praveen K Paladugu	b3e5738b40	vmm: Introduce ApplyLandlock trait ... Introduce ApplyLandlock trait and add implementations to VmConfig elements with PathBufs. This trait adds config specific rules to landlock ruleset. Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>	2024-07-06 04:42:58 +00:00
Praveen K Paladugu	af5a9677c8	vmm: Introduce Landlock module ... This module introduces methods to apply Landlock LSM to cloud-hypervisor threads. Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>	2024-07-06 04:42:58 +00:00
Praveen K Paladugu	1d89f98edf	vmm: Introduce landlock-rules cmdline param ... Users can use this parameter to pass extra paths that 'vmm' and its child threads can use at runtime. Hotplug is the primary usecase for this parameter. In order to hotplug devices that use local files: disks, memory zones, pmem devices etc, users can use this option to pass the path/s that will be used during hotplug while starting cloud-hypervisor. Doing this will allow landlock to add required rules to grant access to these paths when cloud-hypervisor process starts. Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com> Signed-off-by: Wei Liu <liuwe@microsoft.com>	2024-07-06 04:42:58 +00:00