Re: [Qemu-devel] [PATCHv6 1/5] seccomp: changing from whitelist to blacklist

2017-09-14 Thread Daniel P. Berrange
On Fri, Sep 08, 2017 at 01:44:03PM +0200, Eduardo Otubo wrote: > This patch changes the default behavior of the seccomp filter from > whitelist to blacklist. By default now all system calls are allowed and > a small black list of definitely forbidden ones was created. > > Signed-off-by: Eduardo Ot

Re: [Qemu-devel] [PATCHv6 1/5] seccomp: changing from whitelist to blacklist

2017-09-08 Thread Thomas Huth
On 08.09.2017 13:44, Eduardo Otubo wrote: > This patch changes the default behavior of the seccomp filter from > whitelist to blacklist. By default now all system calls are allowed and > a small black list of definitely forbidden ones was created. > > Signed-off-by: Eduardo Otubo > --- > include

[Qemu-devel] [PATCHv6 1/5] seccomp: changing from whitelist to blacklist

2017-09-08 Thread Eduardo Otubo
This patch changes the default behavior of the seccomp filter from whitelist to blacklist. By default now all system calls are allowed and a small black list of definitely forbidden ones was created. Signed-off-by: Eduardo Otubo --- include/sysemu/seccomp.h | 2 + qemu-seccomp.c | 26