Bug 1027421

Summary:	'-sandbox on' option cause Qemu process to hang (defunct)
Product:	[Fedora] Fedora	Reporter:	Rudá Moura <rmoura>
Component:	qemu	Assignee:	Fedora Virtualization Maintainers <virt-maint>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	19	CC:	amit.shah, areis, berrange, cfergeau, crobinso, dwmw2, itamar, lmr, pbonzini, rjones, scottt.tw, virt-maint
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Linux
Whiteboard:
Fixed In Version:	qemu-1.4.2-14.fc19	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-12-03 10:32:20 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Rudá Moura 2013-11-06 19:13:28 UTC

Description of problem:

Qemu process hangs in defunct state when passing "-sandbox on" option.

Version-Release number of selected component (if applicable):

qemu-kvm 1.6.1-1.fc19

How reproducible:

Everytime it runs.

Steps to Reproduce:

Run qemu (qemu-kvm, qemu-system-x86_64) with "-sandbox on" option.

Actual results:

Qemu process in defunct state.  [qemu-system-x86] <defunct>

Expected results:

Qemu process running.

Additional info:

time->Wed Nov  6 16:33:43 2013
type=SECCOMP msg=audit(1383762823.698:815): auid=1000 uid=1000 gid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=7674 comm="qemu-system-x86" sig=31 syscall=100 compat=0 ip=0x7f1efb9b2ebc code=0x0

Comment 1 Cole Robinson 2013-11-17 19:36:34 UTC

Fix is upstream:

commit fe512d65e0b752dfa7af6cfb374a0820d35040d0
Author: Eduardo Otubo <otubo.ibm.com>
Date:   Thu Nov 29 13:56:41 2012 -0200

    seccomp: adding new syscalls (bugzilla 855162)

Comment 2 Cole Robinson 2013-11-17 22:30:43 UTC

Wrong commit, it's this one:

commit c236f4519c9838801798f3705c17dce9ab9e3b9d
Author: Eduardo Otubo <otubo.ibm.com>
Date:   Tue Sep 24 14:50:44 2013 -0300

    seccomp: fine tuning whitelist by adding times()

Comment 3 Fedora Update System 2013-11-17 23:01:59 UTC

qemu-1.4.2-14.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/qemu-1.4.2-14.fc19

Comment 4 Fedora Update System 2013-11-19 05:26:33 UTC

Package qemu-1.4.2-14.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing qemu-1.4.2-14.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-21656/qemu-1.4.2-14.fc19
then log in and leave karma (feedback).

Comment 5 Fedora Update System 2013-12-03 10:32:20 UTC

qemu-1.4.2-14.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.