lockc-project / lockc

Making containers more secure with eBPF and Linux Security Modules (LSM)
https://lockc-project.github.io/
Apache License 2.0
218 stars 19 forks source link

Add socket policies and "offline" policy level #225

Closed vadorovsky closed 1 year ago

vadorovsky commented 1 year ago

Add two new policies based on the following LSM hooks:

Both policies are blocking traffic from/to containers which have the "offline" policy level applied.