From patchwork Thu Aug 21 08:39:50 2014 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Eduardo Otubo X-Patchwork-Id: 381879 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from lists.gnu.org (lists.gnu.org [IPv6:2001:4830:134:3::11]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ozlabs.org (Postfix) with ESMTPS id 9479514009C for ; Thu, 21 Aug 2014 18:40:30 +1000 (EST) Received: from localhost ([::1]:59447 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XKNv2-0008BA-PB for incoming@patchwork.ozlabs.org; Thu, 21 Aug 2014 04:40:28 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:53933) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XKNuc-0007c4-IV for qemu-devel@nongnu.org; Thu, 21 Aug 2014 04:40:08 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1XKNuW-0002bf-Jl for qemu-devel@nongnu.org; Thu, 21 Aug 2014 04:40:02 -0400 Received: from mail-wi0-f174.google.com ([209.85.212.174]:49302) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1XKNuW-0002bU-DM for qemu-devel@nongnu.org; Thu, 21 Aug 2014 04:39:56 -0400 Received: by mail-wi0-f174.google.com with SMTP id d1so8312474wiv.1 for ; Thu, 21 Aug 2014 01:39:55 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=+nrrviUVimFTFNBO/cZYHEWn1UxGGjxJCMr7V27vqYE=; b=cSYmehMj0GxtVRjMeIn+qlsfqfs2jYPoVVySVCJTlVSZTQtXx7hJJWy5wfKxbSCHOn +Q0eFBJiY9ghtM1rdPaMP2pNdoqZGO94NVG2tz4muQT6YTeQDh/4El2pBNF6vT68cOv4 nksTLk2z3v9m4AGK2P0f0pcBUWpaiTcVAHuc6iGrk2xsCCHJau7Dy10770vmbB+mFKf8 viRDdDXcL1LVfTA+VOtd2HSl13UD36QvUqHOnD4nSLD/2s/zyBGe/3QplHR111uyVHsZ mUYX16UyQI3UQl81/gdpq3HstI058vPpoPXzec+dpny/9CaWvRNRA0PU0QniqqpACbKU K5jA== X-Gm-Message-State: ALoCoQmdpAxKRYw45MwsDZ+MwDox1KextDzio7kj3RTiC4gJsNWI6EdB6PyqskWINVfRbCghfgu6 X-Received: by 10.194.71.52 with SMTP id r20mr31198459wju.113.1408610395578; Thu, 21 Aug 2014 01:39:55 -0700 (PDT) Received: from vader.pb.local ([62.217.45.26]) by mx.google.com with ESMTPSA id lj6sm4792779wic.17.2014.08.21.01.39.54 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 21 Aug 2014 01:39:55 -0700 (PDT) From: Eduardo Otubo To: qemu-devel@nongnu.org Date: Thu, 21 Aug 2014 10:39:50 +0200 Message-Id: <1408610390-815-2-git-send-email-eduardo.otubo@profitbricks.com> X-Mailer: git-send-email 1.9.1 In-Reply-To: <1408610390-815-1-git-send-email-eduardo.otubo@profitbricks.com> References: <1408610390-815-1-git-send-email-eduardo.otubo@profitbricks.com> X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 209.85.212.174 Cc: pmoore@redhat.com, Eduardo Otubo Subject: [Qemu-devel] [PULL 01/01] seccomp: add semctl() to the syscall whitelist X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org Sender: qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org From: Paul Moore QEMU needs to call semctl() for correct operation. This particular problem was identified on shutdown with the following commandline: # qemu -sandbox on -monitor stdio \ -device intel-hda -device hda-duplex -vnc :0 Signed-off-by: Paul Moore Signed-off-by: Eduardo Otubo --- qemu-seccomp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/qemu-seccomp.c b/qemu-seccomp.c index ea8094d..0503764 100644 --- a/qemu-seccomp.c +++ b/qemu-seccomp.c @@ -230,7 +230,8 @@ static const struct QemuSeccompSyscall seccomp_whitelist[] = { { SCMP_SYS(timerfd_create), 240 }, { SCMP_SYS(shmctl), 240 }, { SCMP_SYS(mlock), 240 }, - { SCMP_SYS(munlock), 240 } + { SCMP_SYS(munlock), 240 }, + { SCMP_SYS(semctl), 240 } }; int seccomp_start(void)