From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:59437) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aeInf-0003Ai-CG for qemu-devel@nongnu.org; Fri, 11 Mar 2016 03:52:00 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aeIna-00059f-Di for qemu-devel@nongnu.org; Fri, 11 Mar 2016 03:51:59 -0500 Received: from mail-wm0-x229.google.com ([2a00:1450:400c:c09::229]:37160) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aeIna-00058b-5t for qemu-devel@nongnu.org; Fri, 11 Mar 2016 03:51:54 -0500 Received: by mail-wm0-x229.google.com with SMTP id p65so8278176wmp.0 for ; Fri, 11 Mar 2016 00:51:53 -0800 (PST) Date: Fri, 11 Mar 2016 09:51:50 +0100 From: Eduardo Otubo Message-ID: <20160311085150.GA24308@vader> References: <1457343286-16019-1-git-send-email-mrezanin@redhat.com> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh" Content-Disposition: inline In-Reply-To: <1457343286-16019-1-git-send-email-mrezanin@redhat.com> Subject: Re: [Qemu-devel] [PATCH] Whitelist sysinfo call List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: mrezanin@redhat.com Cc: qemu-devel@nongnu.org, armbru@redhat.com --NzB8fVQJ5HfG6fxh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Mar 07, 2016 at 10=3D34=3D46AM +0100, mrezanin@redhat.com wrote: > From: Miroslav Rezanina >=20 > Newer version of nss-softokn libraries (> 3.16.2.3) use sysinfo call > so qemu using rbd image hang after start when run in sandbox mode. >=20 > To allow using rbd images in sandbox mode we have to whitelist it. >=20 > Signed-off-by: Miroslav Rezanina > --- > qemu-seccomp.c | 1 + > 1 file changed, 1 insertion(+) >=20 > diff --git a/qemu-seccomp.c b/qemu-seccomp.c > index 2866e3c..e29fca1 100644 > --- a/qemu-seccomp.c > +++ b/qemu-seccomp.c > @@ -250,6 +250,7 @@ static const struct QemuSeccompSyscall seccomp_whitel= ist[] =3D { > #ifdef HAVE_CACHEFLUSH > { SCMP_SYS(cacheflush), 240 }, > #endif > + { SCMP_SYS(sysinfo), 240 }, Are you sure you want to add this syscall to the bottom of the list? Did you estimate the frequency it is called by running strace? Thanks for the patch. --=20 Eduardo Otubo ProfitBricks GmbH --NzB8fVQJ5HfG6fxh Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJW4ocAAAoJEP0M/1sS+L0vcMIH/1mZC5Js1pS1F0usfYUimeN2 FtKrrCkWHuH8+7Js3vknc9Kq+sKxYXtP1W0hTsDcZwy9TsS6rA4QIW3hRSTzw71S Meu1AxLl33EUer5zI6R5WFn6fhz9D/oEgdrtDEBsOAjhB8rLPz/mRGvD3dxVy6iK fWxEr83AGac6OcdFJaK3wb7WC+8XHrZmAjxqm6XOLVZN55zHLCmCoL2TQYI/Gc3V eQgfO/y/pK6BvWqnvNhRFhsWA36cAVp0Z/lVaTu5qRVktXO6553L3ciuGfbTHAc7 yxU2PGYMzpVMgJ7/ypquy5CtIxDNWphALQGKIxkiXYoVuLXbEznzW9qcGb4c+Sg= =OCQu -----END PGP SIGNATURE----- --NzB8fVQJ5HfG6fxh--