Attachment 610496 Details for Bug 855162 – QEMU seccomp/libseccomp patch (partial fix)

[patch] QEMU seccomp/libseccomp patch (partial fix)

qemu-seccomp-fixes-r1.patch (text/plain), 1.48 KB, created by Paul Moore on 2012-09-06 20:41:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Paul Moore

Created: 2012-09-06 20:41:36 UTC

Size: 1.48 KB

patch

obsolete

>This patch has a number of issues and should not be merged in its current
>form, it is purely a demonstration of what is currently broken.  At the very
>least, the following issues need to be addressed before this patch can be
>taken seriously:
>
> * syscall frequency/priority should be set accordingly
> * 32-bit x86 syscalls should be tested and verified
>
>diff -pur qemu-kvm-1.2.0-rc1.orig/qemu-seccomp.c qemu-kvm-1.2.0-rc1.new/qemu-seccomp.c
>--- qemu-kvm-1.2.0-rc1.orig/qemu-seccomp.c	2012-08-23 17:20:28.000000000 -0400
>+++ qemu-kvm-1.2.0-rc1.new/qemu-seccomp.c	2012-09-06 15:41:07.686176887 -0400
>@@ -107,7 +107,26 @@ static const struct QemuSeccompSyscall s
>     { SCMP_SYS(getsockname), 242 },
>     { SCMP_SYS(getpeername), 242 },
>     { SCMP_SYS(fdatasync), 242 },
>-    { SCMP_SYS(close), 242 }
>+    { SCMP_SYS(close), 242 },
>+    /* PM - needed to get QEMU 1.2-rc1 working w/libvirt on F17 */
>+    { SCMP_SYS(unlink), 1 },
>+    { SCMP_SYS(statfs), 1 },
>+    { SCMP_SYS(getuid), 1 },
>+    { SCMP_SYS(ftruncate), 1 },
>+    { SCMP_SYS(getegid), 1 },
>+    { SCMP_SYS(geteuid), 1 },
>+    { SCMP_SYS(getgid), 1 },
>+    { SCMP_SYS(getrlimit), 1 },
>+    { SCMP_SYS(set_tid_address), 1 },
>+    { SCMP_SYS(socketpair), 1 },
>+    { SCMP_SYS(fstatfs), 1 },
>+    { SCMP_SYS(epoll_create), 1 },
>+    { SCMP_SYS(epoll_ctl), 1 },
>+    { SCMP_SYS(epoll_wait), 1 },
>+    { SCMP_SYS(pipe), 1 },
>+    { SCMP_SYS(poll), 1 },
>+    { SCMP_SYS(rt_sigpending), 1 },
>+    { SCMP_SYS(rt_sigtimedwait), 1 },
> };
> 
> int seccomp_start(void)

Actions: View | Diff

Attachments on bug 855162: 610496 | 611560 | 614984 | 617756 | 654374