Re: [Qemu-devel] detecting -enable-fips

[Eric Blake <eblake@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 1253 bytes --]

On 12/05/2013 02:04 PM, Eric Blake wrote:
> Commit 0f66998 added the command line option -enable-fips for qemu 1.2;
> but as of at least qemu 1.6, the 'query-command-line-options' QMP
> monitor command does not report it.  This is particularly annoying since
> the command line option is conditional - it is present in Linux builds
> but absent in BSD builds.  Does anyone know of any other QMP method for
> querying if this command line option is supported?  Or am I just
> relegated to trying it and seeing if the option gets rejected?
> 
> [I'm personally of the opinion that libvirt should use -enable-fips 100%
> of the time; I don't really see what it is buying us to have an option
> that can be enabled but not disabled, and where enabling it has no
> impact except when running in FIPS mode; especially when the other
> libraries in use on the system already honor FIPS mode without any extra
> command line option.  But I'm not going to be the one to argue for a
> change in behavior other than the mere detection of the option.]

Ping.  Any thoughts at all on how to detect boolean command-line options
via QMP?

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 621 bytes --]