Re: [Qemu-devel] [PATCH v3 1/6] seccomp: changing from whitelist to blacklist

2017-08-11 Thread Daniel P. Berrange
On Fri, Aug 11, 2017 at 11:51:12AM +0200, Eduardo Otubo wrote: > On Thu, Aug 03, 2017 at 06:54:15PM +0200, Thomas Huth wrote: > > On 28.07.2017 14:10, Eduardo Otubo wrote: > > > This patch changes the default behavior of the seccomp filter from > > > whitelist to blacklist. By default now all syste

Re: [Qemu-devel] [PATCH v3 1/6] seccomp: changing from whitelist to blacklist

2017-08-11 Thread Eduardo Otubo
On Thu, Aug 03, 2017 at 06:54:15PM +0200, Thomas Huth wrote: > On 28.07.2017 14:10, Eduardo Otubo wrote: > > This patch changes the default behavior of the seccomp filter from > > whitelist to blacklist. By default now all system calls are allowed and > > a small black list of definitely forbidden

Re: [Qemu-devel] [PATCH v3 1/6] seccomp: changing from whitelist to blacklist

2017-08-03 Thread Thomas Huth
On 28.07.2017 14:10, Eduardo Otubo wrote: > This patch changes the default behavior of the seccomp filter from > whitelist to blacklist. By default now all system calls are allowed and > a small black list of definitely forbidden ones was created. > > Signed-off-by: Eduardo Otubo > --- > qemu-se

Re: [Qemu-devel] [PATCH v3 1/6] seccomp: changing from whitelist to blacklist

2017-08-02 Thread Daniel P. Berrange
On Fri, Jul 28, 2017 at 02:10:35PM +0200, Eduardo Otubo wrote: > This patch changes the default behavior of the seccomp filter from > whitelist to blacklist. By default now all system calls are allowed and > a small black list of definitely forbidden ones was created. > > Signed-off-by: Eduardo Ot