what it takes.
Thanks!
Kevin
From: Michal Koutný
Sent: Wednesday, January 29, 2025 9:12 AM
To: Fox, Kevin M
Cc: systemd-devel@lists.freedesktop.org
Subject: Re: [systemd-devel] By default, restrict vsock
On Fri, Jan 24, 2025 at 05:20:50PM +, "Fox, Ke
get the default ones added, loosening their security.
So, I think there still is a problem here.
Any ideas?
Thanks,
Kevin
From: Michal Koutný
Sent: Tuesday, January 14, 2025 8:29 AM
To: Fox, Kevin M
Cc: systemd-devel@lists.freedesktop.org
Subject: Re
Is there a way to set `RestrictAddressFamilies=~AF_VSOCK` globally on all units
unless they have RestrictAddressFamilies set that allows it?
Thanks,
Kevin