On 08.09.2017 13:44, Eduardo Otubo wrote: > This patch changes the default behavior of the seccomp filter from > whitelist to blacklist. By default now all system calls are allowed and > a small black list of definitely forbidden ones was created. > > Signed-off-by: Eduardo Otubo <ot...@redhat.com> > --- > include/sysemu/seccomp.h | 2 + > qemu-seccomp.c | 260 > +++++------------------------------------------ > vl.c | 1 - > 3 files changed, 30 insertions(+), 233 deletions(-)
Reviewed-by: Thomas Huth <th...@redhat.com>
