Re: [Qemu-devel] [PATCH] seccomp: adding times() to the whitelist

[Eduardo Otubo <otubo@linux.vnet.ibm.com>]

On 09/13/2013 11:45 AM, Paul Moore wrote:
> On Wednesday, September 04, 2013 10:11:10 AM Paul Moore wrote:
>> On Wednesday, September 04, 2013 09:25:08 AM Eduardo Otubo wrote:
>>> This was causing Qemu process to hang when using -sandbox on.
>>>
>>> Related RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175
>>>
>>> Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com>
>>
>> Works for me.
>>
>> Tested-by: Paul Moore <pmoore@redhat.com>
>
> I fear this patch may have been lost in the maintainer discussion - can we
> merge this fix please?

Just another poke on this patch. Poor little bug 
https://bugzilla.redhat.com/show_bug.cgi?id=1004175 is waiting for a fix.

Thanks.

>
>>> ---
>>>
>>>   qemu-seccomp.c |    1 +
>>>   1 files changed, 1 insertions(+), 0 deletions(-)
>>>
>>> diff --git a/qemu-seccomp.c b/qemu-seccomp.c
>>> index 37d38f8..69cee44 100644
>>> --- a/qemu-seccomp.c
>>> +++ b/qemu-seccomp.c
>>> @@ -90,6 +90,7 @@ static const struct QemuSeccompSyscall
>>> seccomp_whitelist[] = { { SCMP_SYS(getuid), 245 },
>>>
>>>       { SCMP_SYS(geteuid), 245 },
>>>       { SCMP_SYS(timer_create), 245 },
>>>
>>> +    { SCMP_SYS(times), 245 },
>>>
>>>       { SCMP_SYS(exit), 245 },
>>>       { SCMP_SYS(clock_gettime), 245 },
>>>       { SCMP_SYS(time), 245 },
>

-- 
Eduardo Otubo
IBM Linux Technology Center