core: implement RestrictNetworkInterfaces=
authorMauricio Vásquez <mauricio@kinvolk.io>
Thu, 21 Jan 2021 16:08:19 +0000 (11:08 -0500)
committerMauricio Vásquez <mauricio@kinvolk.io>
Wed, 18 Aug 2021 20:55:53 +0000 (15:55 -0500)
commit6f50d4f7d6406648232c8cc121ec3f9ea969de1c
tree442ec2af63ca882a8dcdf40d8bb968bc25c62ed0
parentdc83b840d33e30fcd4363e26b933fa5cce410c4a
core: implement RestrictNetworkInterfaces=

This commit introduces all the logic to load and attach the BPF
programs to restrict network interfaces when a unit specifying it is
loaded.

Signed-off-by: Mauricio Vásquez <mauricio@kinvolk.io>
src/basic/cgroup-util.c
src/basic/cgroup-util.h
src/core/cgroup.c
src/core/cgroup.h
src/core/meson.build
src/core/restrict-ifaces.c [new file with mode: 0644]
src/core/restrict-ifaces.h [new file with mode: 0644]
src/core/unit-serialize.c
src/core/unit.c
src/core/unit.h