Re: [Qemu-devel] [PATCHv6 1/5] seccomp: changing from whitelist to blacklist

[Thomas Huth]

On 08.09.2017 13:44, Eduardo Otubo wrote:
> This patch changes the default behavior of the seccomp filter from
> whitelist to blacklist. By default now all system calls are allowed and
> a small black list of definitely forbidden ones was created.
> 
> Signed-off-by: Eduardo Otubo <address@hidden>
> ---
>  include/sysemu/seccomp.h |   2 +
>  qemu-seccomp.c           | 260 
> +++++------------------------------------------
>  vl.c                     |   1 -
>  3 files changed, 30 insertions(+), 233 deletions(-)

Reviewed-by: Thomas Huth <address@hidden>