From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:36088) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VExgO-0005Tj-25 for qemu-devel@nongnu.org; Thu, 29 Aug 2013 04:34:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VExgE-0000FW-VL for qemu-devel@nongnu.org; Thu, 29 Aug 2013 04:34:23 -0400 Received: from mail-ee0-x22d.google.com ([2a00:1450:4013:c00::22d]:46810) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VExgE-0000FQ-O9 for qemu-devel@nongnu.org; Thu, 29 Aug 2013 04:34:14 -0400 Received: by mail-ee0-f45.google.com with SMTP id c50so73468eek.4 for ; Thu, 29 Aug 2013 01:34:13 -0700 (PDT) Date: Thu, 29 Aug 2013 10:34:11 +0200 From: Stefan Hajnoczi Message-ID: <20130829083411.GD23096@stefanha-thinkpad.redhat.com> References: <1377738272-3470-1-git-send-email-otubo@linux.vnet.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1377738272-3470-1-git-send-email-otubo@linux.vnet.ibm.com> Subject: Re: [Qemu-devel] [PATCH] seccomp: adding a second whitelist List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Eduardo Otubo Cc: pmoore@redhat.com, coreyb@linux.vnet.ibm.com, wad@chromium.org, qemu-devel@nongnu.org On Wed, Aug 28, 2013 at 10:04:32PM -0300, Eduardo Otubo wrote: > Now there's a second whitelist, right before the vcpu starts. The second > whitelist is the same as the first one, except for exec() and select(). -netdev tap,downscript=/path/to/script requires exec() in the QEMU shutdown code path. Will this work with seccomp? Stefan