From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from eggs.gnu.org ([2001:4830:134:3::10]:45049)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <pmoore@redhat.com>) id 1VJ0hj-0003Ht-GV
	for qemu-devel@nongnu.org; Mon, 09 Sep 2013 08:36:37 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <pmoore@redhat.com>) id 1VJ0hh-0002UU-TS
	for qemu-devel@nongnu.org; Mon, 09 Sep 2013 08:36:31 -0400
Received: from mx1.redhat.com ([209.132.183.28]:18367)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <pmoore@redhat.com>) id 1VJ0hh-0002UJ-Lc
	for qemu-devel@nongnu.org; Mon, 09 Sep 2013 08:36:29 -0400
From: Paul Moore <pmoore@redhat.com>
Date: Mon, 09 Sep 2013 08:36:25 -0400
Message-ID: <11305371.SUiNjF4f3Q@sifl>
In-Reply-To: <522DA514.5070702@redhat.com>
References: <1378297508-7242-1-git-send-email-otubo@linux.vnet.ibm.com>
	<522A21C2.3010801@linux.vnet.ibm.com> <522DA514.5070702@redhat.com>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="us-ascii"
Subject: Re: [Qemu-devel] [PATCH] seccomp: adding times() to the whitelist
List-Id: <qemu-devel.nongnu.org>
List-Unsubscribe: <https://lists.nongnu.org/mailman/options/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.nongnu.org/archive/html/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <https://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Paolo Bonzini <pbonzini@redhat.com>, Eduardo Otubo <otubo@linux.vnet.ibm.com>
Cc: coreyb@linux.vnet.ibm.com, qemu-devel@nongnu.org

On Monday, September 09, 2013 12:38:12 PM Paolo Bonzini wrote:
> Il 06/09/2013 20:41, Eduardo Otubo ha scritto:
> > Hello,
> > 
> >     Any chance to get this patch applied?
> > 
> > Thanks!
> 
> Paul, perhaps you can add yourself to MAINTAINERS and send a pull request?
> 
> Paolo

Out of respect for the work that Eduardo has done, and is continuing to do, 
with the QEMU seccomp filtering, I think Eduardo should be the one to take on 
this role.  If Eduardo declines I'll do ahead and submit a patch adding myself 
to the MAINTAINERS file.

> > On 09/04/2013 11:11 AM, Paul Moore wrote:
> >> On Wednesday, September 04, 2013 09:25:08 AM Eduardo Otubo wrote:
> >>> This was causing Qemu process to hang when using -sandbox on.
> >>> 
> >>> Related RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1004175
> >>> 
> >>> Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com>
> >> 
> >> Works for me.
> >> 
> >> Tested-by: Paul Moore <pmoore@redhat.com>
> >> 
> >>> ---
> >>> 
> >>>   qemu-seccomp.c |    1 +
> >>>   1 files changed, 1 insertions(+), 0 deletions(-)
> >>> 
> >>> diff --git a/qemu-seccomp.c b/qemu-seccomp.c
> >>> index 37d38f8..69cee44 100644
> >>> --- a/qemu-seccomp.c
> >>> +++ b/qemu-seccomp.c
> >>> @@ -90,6 +90,7 @@ static const struct QemuSeccompSyscall
> >>> seccomp_whitelist[]
> >>> = { { SCMP_SYS(getuid), 245 },
> >>> 
> >>>       { SCMP_SYS(geteuid), 245 },
> >>>       { SCMP_SYS(timer_create), 245 },
> >>> 
> >>> +    { SCMP_SYS(times), 245 },
> >>> 
> >>>       { SCMP_SYS(exit), 245 },
> >>>       { SCMP_SYS(clock_gettime), 245 },
> >>>       { SCMP_SYS(time), 245 },

-- 
paul moore
security and virtualization @ redhat