From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:50815) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1apwtG-0001Fx-S3 for qemu-devel@nongnu.org; Tue, 12 Apr 2016 07:53:55 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1apwtC-0007qN-Qy for qemu-devel@nongnu.org; Tue, 12 Apr 2016 07:53:54 -0400 Received: from mail-wm0-x22e.google.com ([2a00:1450:400c:c09::22e]:36235) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1apwtC-0007qI-K1 for qemu-devel@nongnu.org; Tue, 12 Apr 2016 07:53:50 -0400 Received: by mail-wm0-x22e.google.com with SMTP id v188so123795499wme.1 for ; Tue, 12 Apr 2016 04:53:50 -0700 (PDT) Date: Tue, 12 Apr 2016 13:53:47 +0200 From: Eduardo Otubo Message-ID: <20160412115345.GC24071@vader> References: <1457343286-16019-1-git-send-email-mrezanin@redhat.com> <20160411201952.GA5606@ubuntumail> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="uh9ZiVrAOUUm9fzH" Content-Disposition: inline In-Reply-To: <20160411201952.GA5606@ubuntumail> Subject: Re: [Qemu-devel] [PATCH] Whitelist sysinfo call List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Serge Hallyn Cc: mrezanin@redhat.com, qemu-devel@nongnu.org, armbru@redhat.com --uh9ZiVrAOUUm9fzH Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Apr 11, 2016 at 08=3D19=3D52PM +0000, Serge Hallyn wrote: > Quoting mrezanin@redhat.com (mrezanin@redhat.com): > > From: Miroslav Rezanina > >=20 > > Newer version of nss-softokn libraries (> 3.16.2.3) use sysinfo call > > so qemu using rbd image hang after start when run in sandbox mode. > >=20 > > To allow using rbd images in sandbox mode we have to whitelist it. > >=20 > > Signed-off-by: Miroslav Rezanina >=20 > Thanks. >=20 > Acked-by: Serge E. Hallyn Also: I'll change the subject of this email a little bit for a cleaner and more explicit commit. Thanks. >=20 > > --- > > qemu-seccomp.c | 1 + > > 1 file changed, 1 insertion(+) > >=20 > > diff --git a/qemu-seccomp.c b/qemu-seccomp.c > > index 2866e3c..e29fca1 100644 > > --- a/qemu-seccomp.c > > +++ b/qemu-seccomp.c > > @@ -250,6 +250,7 @@ static const struct QemuSeccompSyscall seccomp_whit= elist[] =3D { > > #ifdef HAVE_CACHEFLUSH > > { SCMP_SYS(cacheflush), 240 }, > > #endif > > + { SCMP_SYS(sysinfo), 240 }, > > }; > > =20 > > int seccomp_start(void) > > --=20 > > 2.5.0 > >=20 > >=20 >=20 --=20 Eduardo Otubo ProfitBricks GmbH --uh9ZiVrAOUUm9fzH Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJXDOHIAAoJEP0M/1sS+L0v79UIAKX8Mokeef9JOk251eZcDdSc iGhhIB65ALAI7QTrfEAJp+cvBjW8vRbaZjgCjDgd8XjYTuvk8+XnoKFTT5fIJXVj w8x/0ExgK8dBccy1TlSECD3yv6b37VE2+25QKy7oYGa1YW2+qrbCrYsQXQBj22G0 +Bd9IFTiW19tASiCbIXS+QitXGeTTytI4wYrlt7G+ijjTkh9zuNV1bxMMRGXvoh9 WB7rzqVOh4phzE30NgKErP0zgcVdkp0gzqDId7SkjBQJxkD+KIBDENHdc6yPwMQs uGT0UvL7NPIirR0Bc9r9hXuwJ+T7NQmx/KTl27AQBXJ1Ev3iFtzQbmjea+Gts5c= =0mfk -----END PGP SIGNATURE----- --uh9ZiVrAOUUm9fzH--