Re: [Qemu-devel] [PATCHv3 1/3] seccomp: adding blacklist support

[Eduardo Otubo <otubo@linux.vnet.ibm.com>]

On 10/08/2013 11:05 PM, Eric Blake wrote:
> On 10/08/2013 06:42 PM, Eduardo Otubo wrote:
>> v3: The "-netdev tap" option is checked in the vl.c file during the
>> process of the command line argument list. It sets tap_enabled to true
>> or false according to the configuration found. Later at the seccomp
>> filter installation, this value is checked wheter to install or not this
>
> s/wheter/whether/

Thank you.

>
>> feature.
>>
>> Adding a system call blacklist right before the vcpus starts. This
>> filter is composed by the system calls that can't be executed after the
>> guests are up. This list should be refined as whitelist is, with as much
>> testing as we can do using virt-test.
>>
>> Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com>
>> ---
>>   include/sysemu/seccomp.h |  6 ++++-
>>   qemu-seccomp.c           | 64 +++++++++++++++++++++++++++++++++++++++---------
>>   vl.c                     | 21 +++++++++++++++-
>>   3 files changed, 77 insertions(+), 14 deletions(-)
>
> No review on the actual patch, just spotting a typo.
>
>

-- 
Eduardo Otubo
IBM Linux Technology Center