apple / apple/container

[Request]: dataleakage prevention

Open
#290 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
Swift
Stars
49.9k
Forks
1.8k
Avg merge
1d 20h
Merged PRs (30d)
22

Description

### Feature or enhancement request details

You are working hard on a native container system on macOS (https://github.com/apple/container) and virtualisation.
While investigating I noticed there is no possibility to manage these virtual machines and/or containers.

If possible we would like to see following possibilities:
- put limitation to which networks these can communicate: only access over VPN/ZTNA and not directly to the internet for example. (prevent dataleakage)
- enforcement from which directories files can be shared and even filesharing can be turned off to prevent dataleakage.
- possibility to enforce the host security tools like client proxy, 3rd party DLP security tools to scan all traffic/files.

At this moment there is no possibility to put any restriction (as far I know) on these components, this is a data leakage and security issue in my opinion because you can easy put malware on the devices via a virtual machine or container. I am always happy to join a call if something is not clear.

### Code of Conduct

- [x] I agree to follow this project's Code of Conduct

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.