On 9/10/26 00:36, Daniel P. Berrangé wrote:
This introduces a new 'insecure-types' option for the 'compat'
argument that accepts three values
* accept: Allow any usage
* reject: Reject with an error reported
* warn: Allow any usage, with a warning reported
For historical compatibility it defaults to 'accept'.
The 'reject' and 'warn' values will take effect for any type
that has been explicitly marked insecure, or is lacking an
explicit declaration of its security status.
This new command line option is currently a no-op, but will
become functional as following patches enable the checks.
Reviewed-by: Marc-André Lureau<[email protected]>
Signed-off-by: Daniel P. Berrangé<[email protected]>
---
include/qapi/compat-policy.h | 5 +++++
qapi/compat.json | 23 ++++++++++++++++++++++-
qapi/qapi-util.c | 30 ++++++++++++++++++++++++++++++
3 files changed, 57 insertions(+), 1 deletion(-)
Reviewed-by: Richard Henderson <[email protected]>
r~
