[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[libvirt] [PATCHv1 0/4] Subject: [PATCHv1 0/4] qemu: Add sandbox support



This series adds support to run QEMU with sandbox enabled, a syscall filter
using seccomp. It can be configured in qemu.conf to on, off, or the QEMU
default, which is off in 1.2. Default value is the QEMU default.

V1 of the patches supports tri-state configuration and includes a test for
detecting the capability.

Ján Tomko (4):
  qemu: add capability flag for sandbox
  qemu: conf: add sandbox option
  qemu: add -sandbox to command line if requested
  tests: add qemu-1.2.0 data

 src/qemu/qemu.conf                   |    8 +
 src/qemu/qemu_capabilities.c         |    3 +
 src/qemu/qemu_capabilities.h         |    1 +
 src/qemu/qemu_command.c              |    7 +
 src/qemu/qemu_conf.c                 |    5 +
 src/qemu/qemu_conf.h                 |    1 +
 tests/qemuhelpdata/qemu-1.2.0        |  270 ++++++++++++++++++++++++++++++++++
 tests/qemuhelpdata/qemu-1.2.0-device |  181 +++++++++++++++++++++++
 tests/qemuhelptest.c                 |   82 ++++++++++
 9 files changed, 558 insertions(+), 0 deletions(-)
 create mode 100644 tests/qemuhelpdata/qemu-1.2.0
 create mode 100644 tests/qemuhelpdata/qemu-1.2.0-device

-- 
1.7.8.6


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]