On Wed, Aug 28, 2013 at 10:04:32PM -0300, Eduardo Otubo wrote: > Now there's a second whitelist, right before the vcpu starts. The second > whitelist is the same as the first one, except for exec() and select().
-netdev tap,downscript=/path/to/script requires exec() in the QEMU shutdown code path. Will this work with seccomp? Stefan