qemu-commits
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Qemu-commits] [qemu/qemu] 9d0fde: sandbox: disable -sandbox if CONFIG_S


From: GitHub
Subject: [Qemu-commits] [qemu/qemu] 9d0fde: sandbox: disable -sandbox if CONFIG_SECCOMP undefi...
Date: Fri, 01 Jun 2018 05:57:47 -0700

  Branch: refs/heads/master
  Home:   https://github.com/qemu/qemu
  Commit: 9d0fdecbad130f01b602e35e87c6d3fad5821d6e
      
https://github.com/qemu/qemu/commit/9d0fdecbad130f01b602e35e87c6d3fad5821d6e
  Author: Yi Min Zhao <address@hidden>
  Date:   2018-06-01 (Fri, 01 Jun 2018)

  Changed paths:
    M include/sysemu/seccomp.h
    M qemu-seccomp.c
    M vl.c

  Log Message:
  -----------
  sandbox: disable -sandbox if CONFIG_SECCOMP undefined

If CONFIG_SECCOMP is undefined, the option 'elevatedprivileges' remains
compiled. This would make libvirt set the corresponding capability and
then trigger failure during guest startup. This patch moves the code
regarding seccomp command line options to qemu-seccomp.c file and
wraps qemu_opts_foreach finding sandbox option with CONFIG_SECCOMP.
Because parse_sandbox() is moved into qemu-seccomp.c file, change
seccomp_start() to static function.

Signed-off-by: Yi Min Zhao <address@hidden>
Reviewed-by: Ján Tomko <address@hidden>
Tested-by: Ján Tomko <address@hidden>
Acked-by: Eduardo Otubo <address@hidden>


  Commit: c25e8bba1f546ea72744ccfab77f8a9e8a323be8
      
https://github.com/qemu/qemu/commit/c25e8bba1f546ea72744ccfab77f8a9e8a323be8
  Author: Peter Maydell <address@hidden>
  Date:   2018-06-01 (Fri, 01 Jun 2018)

  Changed paths:
    M include/sysemu/seccomp.h
    M qemu-seccomp.c
    M vl.c

  Log Message:
  -----------
  Merge remote-tracking branch 'remotes/otubo/tags/pull-seccomp-20180601' into 
staging

pull-seccomp-20180601

# gpg: Signature made Fri 01 Jun 2018 13:01:18 BST
# gpg:                using RSA key DF32E7C0F0FFF9A2
# gpg: Good signature from "Eduardo Otubo (Senior Software Engineer) 
<address@hidden>"
# Primary key fingerprint: D67E 1B50 9374 86B4 0723  DBAB DF32 E7C0 F0FF F9A2

* remotes/otubo/tags/pull-seccomp-20180601:
  sandbox: disable -sandbox if CONFIG_SECCOMP undefined

Signed-off-by: Peter Maydell <address@hidden>


Compare: https://github.com/qemu/qemu/compare/14fc618461c2...c25e8bba1f54
      **NOTE:** This service been marked for deprecation: 
https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.

reply via email to

[Prev in Thread] Current Thread [Next in Thread]