{"action":"created","issue":{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/436","repository_url":"https://api.github.com/repos/vmware/docker-volume-vsphere","labels_url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/436/labels{/name}","comments_url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/436/comments","events_url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/436/events","html_url":"https://github.com/vmware/docker-volume-vsphere/issues/436","id":158205539,"number":436,"title":"Validate client side socket port bind capability","user":{"login":"kerneltime","id":774455,"avatar_url":"https://avatars.githubusercontent.com/u/774455?v=3","gravatar_id":"","url":"https://api.github.com/users/kerneltime","html_url":"https://github.com/kerneltime","followers_url":"https://api.github.com/users/kerneltime/followers","following_url":"https://api.github.com/users/kerneltime/following{/other_user}","gists_url":"https://api.github.com/users/kerneltime/gists{/gist_id}","starred_url":"https://api.github.com/users/kerneltime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kerneltime/subscriptions","organizations_url":"https://api.github.com/users/kerneltime/orgs","repos_url":"https://api.github.com/users/kerneltime/repos","events_url":"https://api.github.com/users/kerneltime/events{/privacy}","received_events_url":"https://api.github.com/users/kerneltime/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/labels/component/server","name":"component/server","color":"bfd4f2"},{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/labels/kind/Feature","name":"kind/Feature","color":"207de5"},{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/labels/P0","name":"P0","color":"006b75"}],"state":"open","locked":false,"assignee":{"login":"kerneltime","id":774455,"avatar_url":"https://avatars.githubusercontent.com/u/774455?v=3","gravatar_id":"","url":"https://api.github.com/users/kerneltime","html_url":"https://github.com/kerneltime","followers_url":"https://api.github.com/users/kerneltime/followers","following_url":"https://api.github.com/users/kerneltime/following{/other_user}","gists_url":"https://api.github.com/users/kerneltime/gists{/gist_id}","starred_url":"https://api.github.com/users/kerneltime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kerneltime/subscriptions","organizations_url":"https://api.github.com/users/kerneltime/orgs","repos_url":"https://api.github.com/users/kerneltime/repos","events_url":"https://api.github.com/users/kerneltime/events{/privacy}","received_events_url":"https://api.github.com/users/kerneltime/received_events","type":"User","site_admin":false},"assignees":[{"login":"kerneltime","id":774455,"avatar_url":"https://avatars.githubusercontent.com/u/774455?v=3","gravatar_id":"","url":"https://api.github.com/users/kerneltime","html_url":"https://github.com/kerneltime","followers_url":"https://api.github.com/users/kerneltime/followers","following_url":"https://api.github.com/users/kerneltime/following{/other_user}","gists_url":"https://api.github.com/users/kerneltime/gists{/gist_id}","starred_url":"https://api.github.com/users/kerneltime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kerneltime/subscriptions","organizations_url":"https://api.github.com/users/kerneltime/orgs","repos_url":"https://api.github.com/users/kerneltime/repos","events_url":"https://api.github.com/users/kerneltime/events{/privacy}","received_events_url":"https://api.github.com/users/kerneltime/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/milestones/7","html_url":"https://github.com/vmware/docker-volume-vsphere/milestones/0.7%20release","labels_url":"https://api.github.com/repos/vmware/docker-volume-vsphere/milestones/7/labels","id":1991705,"number":7,"title":"0.7 release","description":"September release, part of the monthly release cadence. ","creator":{"login":"kerneltime","id":774455,"avatar_url":"https://avatars.githubusercontent.com/u/774455?v=3","gravatar_id":"","url":"https://api.github.com/users/kerneltime","html_url":"https://github.com/kerneltime","followers_url":"https://api.github.com/users/kerneltime/followers","following_url":"https://api.github.com/users/kerneltime/following{/other_user}","gists_url":"https://api.github.com/users/kerneltime/gists{/gist_id}","starred_url":"https://api.github.com/users/kerneltime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kerneltime/subscriptions","organizations_url":"https://api.github.com/users/kerneltime/orgs","repos_url":"https://api.github.com/users/kerneltime/repos","events_url":"https://api.github.com/users/kerneltime/events{/privacy}","received_events_url":"https://api.github.com/users/kerneltime/received_events","type":"User","site_admin":false},"open_issues":2,"closed_issues":0,"state":"open","created_at":"2016-09-08T17:54:27Z","updated_at":"2016-09-08T17:55:08Z","due_on":"2016-09-28T00:00:00Z","closed_at":null},"comments":4,"created_at":"2016-06-02T18:15:11Z","updated_at":"2016-09-08T17:55:24Z","closed_at":null,"body":"We only want processes with root privileges to be able to communicate with the ESX backend.\r\nThis requires\r\n1. Ability to bind a port dynamically below 1024 on the client side\r\n2. Validate the client port on the server side.\r\n\r\n[Relevant doc](https://pubs.vmware.com/vsphere-60/index.jsp#com.vmware.vmci.pg.doc/vsockSecurity.7.4.html?path=7_6_0_4_2_2#1006237)\r\nand from [vSockets Programming Guide, pg 17](https://pubs.vmware.com/vsphere-60/topic/com.vmware.ICbase/PDF/ws9_esx60_vmci_sockets.pdf)\r\n```\r\nThe port number is arbitrary, although server (listener) and client (connector) must use the same number,\r\nwhich must designate a port not already in use. Only privileged processes can use ports < 1024.\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/comments/245682730","html_url":"https://github.com/vmware/docker-volume-vsphere/issues/436#issuecomment-245682730","issue_url":"https://api.github.com/repos/vmware/docker-volume-vsphere/issues/436","id":245682730,"user":{"login":"kerneltime","id":774455,"avatar_url":"https://avatars.githubusercontent.com/u/774455?v=3","gravatar_id":"","url":"https://api.github.com/users/kerneltime","html_url":"https://github.com/kerneltime","followers_url":"https://api.github.com/users/kerneltime/followers","following_url":"https://api.github.com/users/kerneltime/following{/other_user}","gists_url":"https://api.github.com/users/kerneltime/gists{/gist_id}","starred_url":"https://api.github.com/users/kerneltime/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kerneltime/subscriptions","organizations_url":"https://api.github.com/users/kerneltime/orgs","repos_url":"https://api.github.com/users/kerneltime/repos","events_url":"https://api.github.com/users/kerneltime/events{/privacy}","received_events_url":"https://api.github.com/users/kerneltime/received_events","type":"User","site_admin":false},"created_at":"2016-09-08T17:55:24Z","updated_at":"2016-09-08T17:55:24Z","body":"Plan to fix this for next release."}}
{"actor":{"display_login":"kerneltime"}}