diff --git a/vmm/src/vm_config.rs b/vmm/src/vm_config.rs index 38c0a0ba4..aff0d95f3 100644 --- a/vmm/src/vm_config.rs +++ b/vmm/src/vm_config.rs @@ -647,7 +647,12 @@ pub struct VsockConfig { impl ApplyLandlock for VsockConfig { fn apply_landlock(&self, landlock: &mut Landlock) -> LandlockResult<()> { + if let Some(parent) = self.socket.parent() { + landlock.add_rule_with_access(parent, "w")?; + } + landlock.add_rule_with_access(&self.socket, "rw")?; + Ok(()) } }