Re: [PATCH 048/104] virtiofsd: move to an empty network namespace

2020-01-06 Thread Daniel P . Berrangé
On Thu, Dec 12, 2019 at 04:38:08PM +, Dr. David Alan Gilbert (git) wrote: > From: Stefan Hajnoczi > > If the process is compromised there should be no network access. Use an > empty network namespace to sandbox networking. > > Signed-off-by: Stefan Hajnoczi > --- > tools/virtiofsd/passthr

[PATCH 048/104] virtiofsd: move to an empty network namespace

2019-12-12 Thread Dr. David Alan Gilbert (git)
From: Stefan Hajnoczi If the process is compromised there should be no network access. Use an empty network namespace to sandbox networking. Signed-off-by: Stefan Hajnoczi --- tools/virtiofsd/passthrough_ll.c | 14 ++ 1 file changed, 14 insertions(+) diff --git a/tools/virtiofsd/