From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:59247) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SfeJP-0000RF-Q6 for qemu-devel@nongnu.org; Fri, 15 Jun 2012 17:44:13 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1SfeJO-0006jc-49 for qemu-devel@nongnu.org; Fri, 15 Jun 2012 17:44:11 -0400 Received: from mx1.redhat.com ([209.132.183.28]:57153) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1SfeJN-0006iy-Sd for qemu-devel@nongnu.org; Fri, 15 Jun 2012 17:44:10 -0400 Message-ID: <4FDBACA5.8040201@redhat.com> Date: Fri, 15 Jun 2012 15:44:05 -0600 From: Eric Blake MIME-Version: 1.0 References: <20120613203028.GB6019@redhat.com> <5022524.gIe1TV6Uvp@sifl> In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------enigBA37770215CEA7AA98EBE348" Subject: Re: [Qemu-devel] [RFC] [PATCHv2 2/2] Adding basic calls to libseccomp in vl.c List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Blue Swirl Cc: Paul Moore , qemu-devel@nongnu.org, Eduardo Otubo This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enigBA37770215CEA7AA98EBE348 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 06/15/2012 03:23 PM, Blue Swirl wrote: > How about seccomp mode selected by command line switch -seccomp, in > which bind/connect/open/execve are forbidden? The functionality > remaining would be somewhat limited (can't migrate or use SMB etc. More properly, can't migrate with exec:command migration. But fd:nnn migration should still be viable. --=20 Eric Blake eblake@redhat.com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --------------enigBA37770215CEA7AA98EBE348 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQEcBAEBCAAGBQJP26ylAAoJEKeha0olJ0Nq5fQH/RS2/hNsFqopaPCEEejtE6bX k8CX01pZPJCFK5UxxiXKeMR84RO5IzY3xq1IhlZLtO3iZVbT7vP2x62GRomUCuhx Z9jKmq5E2P2Ab6i73maGSclIYl+lbZSxfpTDByjntQFQvF1qKcDm1fZxbiHx/KW2 Ji1l1rnOZBoZKRxuit3HAEA+Yoswg0TkRLkZ0gdFwYlp1DI4rN+TXxpyNl5VU1HF 2KW3ddM3KL+8MQpw3kIfWu4917F1eQNvppOB7vSKyaQHnh2SumbTGqxnOBZkOPM4 dBGxJnsScLuGpdwzmGJYBhTl3vPvCJYVH4vPvq+fRzHM3yJj11HcrxNHiWsK1bM= =B+oA -----END PGP SIGNATURE----- --------------enigBA37770215CEA7AA98EBE348--