RFE: add LSM/SELinux access controls for AF_VSOCK sockets
pcmoore opened this issue · 1 comments
pcmoore commented
AF_VSOCK is a communications channel between a VM and the hypervisor that was created by VMware and has since been adopted by other hypervisors.
pcmoore commented
We have basic socket permissions via the "vsock_socket" object class, and the lack of problem reports or feature requests leads me to believe that it is sufficient for now.