mirror of
https://github.com/cloud-hypervisor/cloud-hypervisor.git
synced 2026-08-05 02:19:16 +00:00
aa9678da67
With landlock enabled, the vmdk disk path representing the descriptor file is added to allowed path. However, this is a plain text file which points to actual data blobs called extents. The extent paths are not allowed and must be explicitly passed via landlock-rules path. Signed-off-by: Sumedh Alok Sharma <sumsharma@microsoft.com>