Re: [Qemu-devel] [PATCH 2/4] Setting "-sandbox on" as deafult

2012-10-18 Thread Corey Bryant
I think it's worth nothing that Eduardo is planning to submit a separate patch providing (commented out?) code that will allow developers to easily determine the syscalls that need to be added to the whitelist. That is, if QEMU is being killed by seccomp due to disallowed syscall usage. -- Reg

[Qemu-devel] [PATCH 2/4] Setting "-sandbox on" as deafult

2012-10-17 Thread Eduardo Otubo
Now the seccomp filter will be set to "on" even if no argument "-sandbox" is given. Signed-off-by: Eduardo Otubo --- configure | 2 +- vl.c | 38 +++--- 2 files changed, 28 insertions(+), 12 deletions(-) diff --git a/configure b/configure index 353d788..c61