Re: [systemd-devel] By default, restrict vsock

2025-01-29 Thread Fox, Kevin M
what it takes. Thanks! Kevin From: Michal Koutný Sent: Wednesday, January 29, 2025 9:12 AM To: Fox, Kevin M Cc: systemd-devel@lists.freedesktop.org Subject: Re: [systemd-devel] By default, restrict vsock On Fri, Jan 24, 2025 at 05:20:50PM +, "Fox, Ke

Re: [systemd-devel] By default, restrict vsock

2025-01-24 Thread Fox, Kevin M
get the default ones added, loosening their security. So, I think there still is a problem here. Any ideas? Thanks, Kevin From: Michal Koutný Sent: Tuesday, January 14, 2025 8:29 AM To: Fox, Kevin M Cc: systemd-devel@lists.freedesktop.org Subject: Re

[systemd-devel] By default, restrict vsock

2025-01-10 Thread Fox, Kevin M
Is there a way to set `RestrictAddressFamilies=~AF_VSOCK` globally on all units unless they have RestrictAddressFamilies set that allows it? Thanks, Kevin