On 10/08/2013 11:05 PM, Eric Blake wrote:
On 10/08/2013 06:42 PM, Eduardo Otubo wrote:
v3: The "-netdev tap" option is checked in the vl.c file during the
process of the command line argument list. It sets tap_enabled to true
or false according to the configuration found. Later at the seccomp
filter installation, this value is checked wheter to install or not this
s/wheter/whether/
Thank you.
feature.
Adding a system call blacklist right before the vcpus starts. This
filter is composed by the system calls that can't be executed after the
guests are up. This list should be refined as whitelist is, with as much
testing as we can do using virt-test.
Signed-off-by: Eduardo Otubo <ot...@linux.vnet.ibm.com>
---
include/sysemu/seccomp.h | 6 ++++-
qemu-seccomp.c | 64 +++++++++++++++++++++++++++++++++++++++---------
vl.c | 21 +++++++++++++++-
3 files changed, 77 insertions(+), 14 deletions(-)
No review on the actual patch, just spotting a typo.
--
Eduardo Otubo
IBM Linux Technology Center
