From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:35607) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VoCOO-0000CG-Jb for qemu-devel@nongnu.org; Wed, 04 Dec 2013 08:21:37 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VoCOF-0003Ys-Mj for qemu-devel@nongnu.org; Wed, 04 Dec 2013 08:21:28 -0500 Received: from e24smtp02.br.ibm.com ([32.104.18.86]:59969) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VoCOF-0003Ye-8t for qemu-devel@nongnu.org; Wed, 04 Dec 2013 08:21:19 -0500 Received: from /spool/local by e24smtp02.br.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Wed, 4 Dec 2013 11:21:17 -0200 Received: from d24relay03.br.ibm.com (d24relay03.br.ibm.com [9.13.184.25]) by d24dlp01.br.ibm.com (Postfix) with ESMTP id 868A2352006A for ; Wed, 4 Dec 2013 08:21:13 -0500 (EST) Received: from d24av01.br.ibm.com (d24av01.br.ibm.com [9.8.31.91]) by d24relay03.br.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id rB4DKwaa38142014 for ; Wed, 4 Dec 2013 11:20:58 -0200 Received: from d24av01.br.ibm.com (localhost [127.0.0.1]) by d24av01.br.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id rB4DLDmi007151 for ; Wed, 4 Dec 2013 11:21:13 -0200 Message-ID: <529F2C48.3060304@linux.vnet.ibm.com> Date: Wed, 04 Dec 2013 11:21:12 -0200 From: Eduardo Otubo MIME-Version: 1.0 References: <1382440906-3852-1-git-send-email-otubo@linux.vnet.ibm.com> <3468561.4aYf2ZG3eq@sifl> <20131122154841.GA3232@stefanha-thinkpad.redhat.com> <7966284.CJrPIyrYnI@sifl> <20131204093946.GA19096@stefanha-thinkpad.redhat.com> In-Reply-To: <20131204093946.GA19096@stefanha-thinkpad.redhat.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH for-1.7] seccomp: setting "-sandbox on" by default List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Stefan Hajnoczi Cc: Paul Moore , Paolo Bonzini , coreyb@linux.vnet.ibm.com, qemu-devel , Anthony Liguori On 12/04/2013 07:39 AM, Stefan Hajnoczi wrote: > On Fri, Nov 22, 2013 at 11:00:24AM -0500, Paul Moore wrote: >>> Developers will only be happy with seccomp if it's easy and rewarding to >>> support/debug. >> >> Agreed. >> >> As a developer, how do you feel about the audit/syslog based approach I >> mentioned earlier? > > I used the commands you posted (I think that's what you mean). They > produce useful output. > > The problem is that without an error message on stderr or from the > shell, no one will think "QEMU process dead and hung == check seccomp" > immediately. It's frustrating to deal with a "silent" failure. The process dies with a SIGKILL, and sig handling in Qemu is hard to implement due to dozen of external linked libraries that has their own signal masks and conflicts with seccomp. I've already tried this approach in the past (you can find in the list by searching for debug mode) The optimal goal here is to use virt-test and audit log to eliminate these sorts of things. -- Eduardo Otubo IBM Linux Technology Center