securitypolicy: Add enforcement point for blockdev mounts#2762

Draft

micromaomao wants to merge 13 commits into

microsoft:mainfrom

micromaomao:tingmao_github/blockdev-enforcement

Commits on May 30, 2026

Merged PR 12878455: Fix for the Rego "metadata desync" bug
micromaomao
committed
Allow unrecoverable_error.go to build on Windows and fix IsSNP() invocation
micromaomao
committed
Merged PR 12878148: bridge: Force sequential message handling for confidential containers
micromaomao
committed
Fix usage of IsSNP() to handle the new error return value
micromaomao
committed
Merged PR 13618357: guest/network: Restrict hostname to valid characters
micromaomao
committed
Merged PR 12878779: Enhance uvm_state::hostMounts to track in-use mounts, and prevent unmounting or deleting in-use things
micromaomao
committed
Merged PR 13627088: guest: Don't allow host to set mount options
micromaomao
committed
Merged PR 13694574: hcsv2/uvm, rego: Enforce OCI spec does not contain any LinuxDevices
micromaomao
committed