From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:49563) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V1Kvi-0005Hp-DU for qemu-devel@nongnu.org; Mon, 22 Jul 2013 14:33:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1V1Kvh-0002as-2f for qemu-devel@nongnu.org; Mon, 22 Jul 2013 14:33:54 -0400 Received: from e24smtp02.br.ibm.com ([32.104.18.86]:53846) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1V1Kvg-0002Zf-O3 for qemu-devel@nongnu.org; Mon, 22 Jul 2013 14:33:53 -0400 Received: from /spool/local by e24smtp02.br.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 22 Jul 2013 15:33:48 -0300 Received: from d24relay02.br.ibm.com (d24relay02.br.ibm.com [9.13.184.26]) by d24dlp02.br.ibm.com (Postfix) with ESMTP id D0BDF1DC0063 for ; Mon, 22 Jul 2013 14:33:45 -0400 (EDT) Received: from d24av03.br.ibm.com (d24av03.br.ibm.com [9.8.31.95]) by d24relay02.br.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6MIWERC26411030 for ; Mon, 22 Jul 2013 15:32:14 -0300 Received: from d24av03.br.ibm.com (localhost [127.0.0.1]) by d24av03.br.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id r6MIXioh023618 for ; Mon, 22 Jul 2013 15:33:44 -0300 From: Eduardo Otubo Date: Mon, 22 Jul 2013 15:33:35 -0300 Message-Id: <1374518017-10424-1-git-send-email-otubo@linux.vnet.ibm.com> Subject: [Qemu-devel] [PATCHv3 0/2] seccomp: remove unused syscalls - for 1.6 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: pmoore@redhat.com, pbonzini@redhat.com, coreyb@linux.vnet.ibm.com, Eduardo Otubo In this small patch series I basically: v3 update: - reincluded getrlimit(), it's used by Xen. v2 update: - set libseccomp 2.1.0 as requirement on configure script. - reincluded setrlimit() (used by Xen) and removed sendfile64() from the whitelist. 1) Remove the ifdef's for the (not so) new libseccomp version that does a best effort and translates x86_32 syscalls into x86_64 when possible. 2) Remove unused syscalls on the seccomp whitelist. For that removal, I've been running several instances of Qemu using a script written on top of virt-test[0]. After some weeks testing I could come up with this small list, and safely remove them without breaking anything. [0] - https://github.com/autotest/virt-test/wiki Eduardo Otubo (2): seccomp: no need to check arch in syscall whitelist seccomp: removing unused syscalls gtom whitelist configure | 2 +- qemu-seccomp.c | 17 ----------------- 2 files changed, 1 insertion(+), 18 deletions(-) -- 1.8.3.1