[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL 22/38] docker: Use unconfined security profile
From: |
Fam Zheng |
Subject: |
[Qemu-devel] [PULL 22/38] docker: Use unconfined security profile |
Date: |
Fri, 8 Sep 2017 17:54:50 +0800 |
Some by default blocked syscalls are required to run tests for example
userfaultfd.
Reviewed-by: Kashyap Chamarthy <address@hidden>
Signed-off-by: Fam Zheng <address@hidden>
Message-Id: <address@hidden>
Reviewed-by: Stefan Hajnoczi <address@hidden>
Based-on: address@hidden
---
tests/docker/Makefile.include | 1 +
1 file changed, 1 insertion(+)
diff --git a/tests/docker/Makefile.include b/tests/docker/Makefile.include
index 4bb02b1bb5..0e4f159619 100644
--- a/tests/docker/Makefile.include
+++ b/tests/docker/Makefile.include
@@ -135,6 +135,7 @@ docker-run: docker-qemu-src
$(call quiet-command, \
$(SRC_PATH)/tests/docker/docker.py run \
$(if $(NOUSER),,-u $(shell id -u)) -t \
+ --security-opt seccomp=unconfined \
$(if $V,,--rm) \
$(if $(DEBUG),-i,) \
$(if $(NETWORK),$(if $(subst
$(NETWORK),,1),--net=$(NETWORK)),--net=none) \
--
2.13.5
- [Qemu-devel] [PULL 12/38] tests: Add ubuntu.i386 image, (continued)
- [Qemu-devel] [PULL 12/38] tests: Add ubuntu.i386 image, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 13/38] tests: Add FreeBSD image, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 14/38] tests: Add NetBSD image, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 15/38] tests: Add OpenBSD image, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 16/38] Makefile: Add rules to run vm tests, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 17/38] MAINTAINERS: Add tests/vm entry, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 18/38] tests: Add README for vm tests, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 19/38] docker: Use archive-source.py, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 20/38] docker: Fix return code of build_qemu(), Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 21/38] docker: Add test_fail and prep_fail, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 22/38] docker: Use unconfined security profile,
Fam Zheng <=
- [Qemu-devel] [PULL 23/38] docker: Add nettle-devel to fedora image, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 24/38] docker: Add test-block, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 25/38] docker: Drop 'set -e' from run script, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 26/38] vl: Don't include vde header, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 27/38] buildsys: Move vde libs to per object, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 28/38] buildsys: Move gtk/vte cflags/libs to per object, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 29/38] buildsys: Move sdl cflags/libs to per object, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 32/38] buildsys: Move curese cflags/libs to per object, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 30/38] buildsys: Move vnc cflags/libs to per object, Fam Zheng, 2017/09/08
- [Qemu-devel] [PULL 31/38] buildsys: Move audio libs to per object, Fam Zheng, 2017/09/08