diff options
| author |  Konstantin Meskhidze <konstantin.meskhidze@huawei.com>
| 2023-10-26 09:47:50 +0800 |
|---|---|---|
| committer |  Mickaël Salaün <mic@digikod.net>
| 2023-10-26 21:07:17 +0200 |
| commit | 5e990dcef12eebf683d209bac5e14591308dc216 (patch) | |
| tree | 18cf21c8e1e5e1b9b70464c0254f087254d6a618 /samples/bpf | |
| parent | selftests/landlock: Add network tests (diff) | |
| download | linux-5e990dcef12eebf683d209bac5e14591308dc216.tar.gz linux-5e990dcef12eebf683d209bac5e14591308dc216.tar.bz2 linux-5e990dcef12eebf683d209bac5e14591308dc216.zip | |
samples/landlock: Support TCP restrictions
Add TCP restrictions to the sandboxer demo. It's possible to allow a
sandboxer to bind/connect to a list of specified ports restricting
network actions to the rest of them. This is controlled with the new
LL_TCP_BIND and LL_TCP_CONNECT environment variables.
Rename ENV_PATH_TOKEN to ENV_DELIMITER.
Signed-off-by: Konstantin Meskhidze <konstantin.meskhidze@huawei.com>
Link: https://lore.kernel.org/r/20231026014751.414649-12-konstantin.meskhidze@huawei.com
[mic: Extend commit message]
Signed-off-by: Mickaël Salaün <mic@digikod.net>
Diffstat (limited to 'samples/bpf')
0 files changed, 0 insertions, 0 deletions