[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 85
From: |
Paul Moore |
Subject: |
Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162) |
Date: |
Mon, 26 Nov 2012 15:41 -0500 |
User-agent: |
KMail/4.9.3 (Linux/3.6.6-gentoo; KDE/4.9.3; x86_64; ; ) |
On Monday, November 26, 2012 02:59:21 PM Corey Bryant wrote:
> On 11/26/2012 12:08 PM, Paul Moore wrote:
> > On Monday, November 26, 2012 11:41:06 AM Corey Bryant wrote:
> >> On 11/21/2012 10:24 AM, Paul Moore wrote:
> >>> On Wednesday, November 21, 2012 11:20:44 AM Eduardo Otubo wrote:
> >>>> Hello folks,
> >>>>
> >>>> Does anyone had a chance to take a look at this? We would like to get
> >>>> this into the 1.3 release.
> >>>>
> >>>> Thanks again :)
> >>>
> >>> I way a bit delayed due to travel, but I started playing with it a bit
> >>> yesterday afternoon and unfortunately it still doesn't work for me
> >>> (using the same test/reproducer I documented in the RH BZ). I've tried
> >>> running QEMU both via libvirt and the command line (using a libvirt
> >>> derived command line).
> >>>
> >>> I'm applying the patches to the F17 QEMU 1.2 package; there is some
> >>> minor fixup needed in the configure script but nothing major.
> >>>
> >>> What is further frustrating is that the debug code (patch 5/5) doesn't
> >>> seem to output the problematic syscall. I wanted to investigate this a
> >>> bit more before responding, but with the holiday approaching
> >>> (Thanksgiving in the US), I'm not sure how much progress I'll be able to
> >>> make for the remainder of this week. Sorry about that.
> >>>
> >>> If you have any further questions about how, or what, I'm testing, just
> >>> ask.
> >>
> >> Paul, Is your host 32 or 64-bit?
> >
> > 64-bit
>
> I'm having trouble recreating this. I'm running a Fedora 17 64-bit host
> and a Fedora 17 64-bit guest with domain XML that mirrors yours.
>
> Here's the domain XML I'm using and the resulting QEMU command line:
>
> Domain XML: http://pastebin.com/DWa4RQ1Y
> Command line: http://pastebin.com/2QTWsUhP
>
> I'm running with QEMU commit 8db972cfa469b4e4afd9c65e54e796b83b5ce3a2
> which is 1.2.0 with: (a) just the first patch applied, as well as with
> (b) all of this patch series applied.
>
> Any thoughts on what could be different?
Like I said earlier, I'm running with the F17 QEMU 1.2 package,
qemu-1.2.0-16.fc18 to be exact, with Eduardo's patches applied on top.
I'm currently testing another set of interim patches from Eduardo that was
sent off-list for testing (you were CC'd); hopefully that will resolve the
problem.
--
paul moore
security and virtualization @ redhat
- [Qemu-devel] [PATCHv3 3/5] net: Disallow device hotplug that causes execve(), (continued)
- [Qemu-devel] [PATCHv3 3/5] net: Disallow device hotplug that causes execve(), Eduardo Otubo, 2012/11/12
- [Qemu-devel] [PATCHv3 2/5] seccomp: setting "-sandbox on" as deafult, Eduardo Otubo, 2012/11/12
- [Qemu-devel] [PATCHv3 4/5] seccomp: double whitelist support, Eduardo Otubo, 2012/11/12
- [Qemu-devel] [PATCHv3 5/5] seccomp: adding debug mode, Eduardo Otubo, 2012/11/12
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Eduardo Otubo, 2012/11/21
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Paul Moore, 2012/11/21
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Corey Bryant, 2012/11/26
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Paul Moore, 2012/11/26
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Corey Bryant, 2012/11/26
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162),
Paul Moore <=
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Paul Moore, 2012/11/26
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Corey Bryant, 2012/11/27
- Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Paul Moore, 2012/11/27
Re: [Qemu-devel] [PATCHv3 1/5] seccomp: adding new syscalls (bugzilla 855162), Andreas Färber, 2012/11/21