SELinuxProject/selinux-kernel

RFE: add LSM/SELinux access controls for AF_VSOCK sockets

pcmoore opened this issue · 1 comments

AF_VSOCK is a communications channel between a VM and the hypervisor that was created by VMware and has since been adopted by other hypervisors.

We have basic socket permissions via the "vsock_socket" object class, and the lack of problem reports or feature requests leads me to believe that it is sufficient for now.