From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:33137) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTj9l-0006A1-6A for qemu-devel@nongnu.org; Tue, 08 Oct 2013 22:05:50 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VTj9g-0006qt-9A for qemu-devel@nongnu.org; Tue, 08 Oct 2013 22:05:45 -0400 Received: from mx1.redhat.com ([209.132.183.28]:31597) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VTj9f-0006qi-PQ for qemu-devel@nongnu.org; Tue, 08 Oct 2013 22:05:40 -0400 Message-ID: <5254B9EF.70905@redhat.com> Date: Tue, 08 Oct 2013 20:05:35 -0600 From: Eric Blake MIME-Version: 1.0 References: <1381279346-23676-1-git-send-email-otubo@linux.vnet.ibm.com> <1381279346-23676-2-git-send-email-otubo@linux.vnet.ibm.com> In-Reply-To: <1381279346-23676-2-git-send-email-otubo@linux.vnet.ibm.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="rl8IrOhnO61xPPU5wmt5gcGufvb38VE0K" Subject: Re: [Qemu-devel] [PATCHv3 1/3] seccomp: adding blacklist support List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Eduardo Otubo Cc: pmoore@redhat.com, coreyb@linux.vnet.ibm.com, qemu-devel@nongnu.org, anthony@codemonkey.ws This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --rl8IrOhnO61xPPU5wmt5gcGufvb38VE0K Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 10/08/2013 06:42 PM, Eduardo Otubo wrote: > v3: The "-netdev tap" option is checked in the vl.c file during the > process of the command line argument list. It sets tap_enabled to true > or false according to the configuration found. Later at the seccomp > filter installation, this value is checked wheter to install or not thi= s s/wheter/whether/ > feature. >=20 > Adding a system call blacklist right before the vcpus starts. This > filter is composed by the system calls that can't be executed after the= > guests are up. This list should be refined as whitelist is, with as muc= h > testing as we can do using virt-test. >=20 > Signed-off-by: Eduardo Otubo > --- > include/sysemu/seccomp.h | 6 ++++- > qemu-seccomp.c | 64 +++++++++++++++++++++++++++++++++++++++-= -------- > vl.c | 21 +++++++++++++++- > 3 files changed, 77 insertions(+), 14 deletions(-) No review on the actual patch, just spotting a typo. --=20 Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --rl8IrOhnO61xPPU5wmt5gcGufvb38VE0K Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJSVLnvAAoJEKeha0olJ0NqRBoH/28uxjJ4IeRPhEMYm3itC6L1 GLe8Pcn0ZuIAtO2Fwr/3J6OGIvDF+AA82O5+St9vyofa5wCpFC6t21CewLvi2ZVv cBPP5BkLNTm+rLSecNxxVRn6k6q8AFfGwSXkm7PG1ZbzTUnrQY6amJGXY68Jhk6A bZfgcVT+83723+Mi5kWvc1MEBfKxPW1SfE+pfHM7OLaV/Egy8WHQ9wQZ6d7El8wT gM92CGxF0aTixo2xDESDIGfdhsxlMJ20fOsZVEi3kMcPdDTops4G2Mo+JpS9mq9p emBccy8X+Lfk8vIQRz2zXt1Iqqh/+csFgGOjEPXfG++PKf50YItlydXhsgiYpQ4= =gQFw -----END PGP SIGNATURE----- --rl8IrOhnO61xPPU5wmt5gcGufvb38VE0K--