James O. D. Hunt 6abccb92ce forwarder: Drop privileges when using hybrid VSOCK ...

Hybrid VSOCK requires `root` privileges to access the sandbox-specific
host-side AF_UNIX socket created by the hypervisor (CLH or FC). However,
once the socket has been bound, privileges can be dropped, allowing the
forwarder to run as user `nobody`.

Fixes: #2905.

Signed-off-by: James O. D. Hunt <james.o.hunt@intel.com>

2021-10-26 11:01:58 +01:00

..

handler.rs

trace-forwarder: Support Hybrid VSOCK

2021-10-15 11:45:29 +01:00

main.rs

forwarder: Drop privileges when using hybrid VSOCK

2021-10-26 11:01:58 +01:00

server.rs

forwarder: Drop privileges when using hybrid VSOCK

2021-10-26 11:01:58 +01:00

tracer.rs

tracing: Make trace-forwarder async

2021-05-27 10:48:05 +01:00

utils.rs

trace-forwarder: Support Hybrid VSOCK

2021-10-15 11:45:29 +01:00