On 05/18/2018 09:03 AM, Ján Tomko wrote:
> There is a patch proposal on qemu-devel that removes the -sandbox
> option completely without CONFIG_SECCOMP:
> http://lists.nongnu.org/archive/html/qemu-devel/2018-05/msg03312.html
>
> Now that we assume query-command-line-options support, we can probe
> for it and honor the seccomp_sandbox = 0 qemu.conf option
> even without passing the -sandbox off option.
>
> Ján Tomko (2):
> Reintroduce QEMU_CAPS_SECCOMP_SANDBOX
> qemu: only pass -sandbox off if supported
>
> src/qemu/qemu_capabilities.c | 1 +
> src/qemu/qemu_capabilities.h | 2 +-
> src/qemu/qemu_command.c | 3 ++-
> tests/qemucapabilitiesdata/caps_1.5.3.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_1.6.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_1.7.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.1.1.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.10.0.aarch64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.10.0.ppc64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.10.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.10.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.11.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.12.0.aarch64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.12.0.ppc64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.12.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.12.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.4.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.5.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.6.0.aarch64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.6.0.ppc64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.6.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.7.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.7.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.8.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.8.0.x86_64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.9.0.ppc64.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.9.0.s390x.xml | 1 +
> tests/qemucapabilitiesdata/caps_2.9.0.x86_64.xml | 1 +
> 28 files changed, 29 insertions(+), 2 deletions(-)
>
Reviewed-by: John Ferlan <jferlan@redhat.com>
(series)
John
--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list