Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Support for Socket Type and Family Enforcement #1914

Open
dorkamotorka opened this issue Dec 14, 2024 · 1 comment
Open

Add Support for Socket Type and Family Enforcement #1914

dorkamotorka opened this issue Dec 14, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@dorkamotorka
Copy link

Feature Request

Short Description

Currently KubeArmor only support enforcement by Protocol. I thought it might be neat to add support for filtering by Socket Type and Family/Domain.

For example, allow the user to specify Socket Types:

  • SOCK_STREAM
  • SOCK_DGRAM
  • SOCK_SEQPACKET
  • SOCK_RAW
  • SOCK_RDM

Or Socket Family/Domain:

  • AF_UNIX/AF_LOCAL
  • AF_INET
  • AF_INET6

Have I missed some that are relevant for your use cases?

I have done this already on my local KubeArmor deployment, but I thought about asking before opening a PR. Any second thoughts?

@dorkamotorka dorkamotorka added the enhancement New feature or request label Dec 14, 2024
@dorkamotorka dorkamotorka changed the title Add Support for Socket Type and Family Filtering Add Support for Socket Type and Family Enforcement Dec 14, 2024
@daemon1024
Copy link
Member

We added socket type support in #1892

Happy to have the PR, we definitely want this @dorkamotorka

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants