{"id":811396,"url":"http://patchwork.ozlabs.org/api/covers/811396/?format=json","web_url":"http://patchwork.ozlabs.org/project/qemu-devel/cover/20170908091027.9104-1-otubo@redhat.com/","project":{"id":14,"url":"http://patchwork.ozlabs.org/api/projects/14/?format=json","name":"QEMU Development","link_name":"qemu-devel","list_id":"qemu-devel.nongnu.org","list_email":"qemu-devel@nongnu.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20170908091027.9104-1-otubo@redhat.com>","list_archive_url":null,"date":"2017-09-08T09:10:22","name":"[PATCHv5,0/6] seccomp: feature refactoring","submitter":{"id":71779,"url":"http://patchwork.ozlabs.org/api/people/71779/?format=json","name":"Eduardo Otubo","email":"otubo@redhat.com"},"mbox":"http://patchwork.ozlabs.org/project/qemu-devel/cover/20170908091027.9104-1-otubo@redhat.com/mbox/","series":[{"id":2143,"url":"http://patchwork.ozlabs.org/api/series/2143/?format=json","web_url":"http://patchwork.ozlabs.org/project/qemu-devel/list/?series=2143","date":"2017-09-08T09:10:22","name":"seccomp: feature refactoring","version":1,"mbox":"http://patchwork.ozlabs.org/series/2143/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/811396/comments/","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":["ozlabs.org;\n\tspf=pass (mailfrom) smtp.mailfrom=nongnu.org\n\t(client-ip=2001:4830:134:3::11; helo=lists.gnu.org;\n\tenvelope-from=qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org;\n\treceiver=)","ext-mx09.extmail.prod.ext.phx2.redhat.com;\n\tdmarc=none (p=none dis=none) header.from=redhat.com","ext-mx09.extmail.prod.ext.phx2.redhat.com;\n\tspf=fail smtp.mailfrom=otubo@redhat.com"],"Received":["from lists.gnu.org (lists.gnu.org [IPv6:2001:4830:134:3::11])\n\t(using TLSv1 with cipher AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xpWlr61ktz9sCZ\n\tfor ;\n\tFri, 8 Sep 2017 19:11:36 +1000 (AEST)","from localhost ([::1]:43994 helo=lists.gnu.org)\n\tby lists.gnu.org with esmtp (Exim 4.71) (envelope-from\n\t)\n\tid 1dqFK2-0001Ch-QW\n\tfor incoming@patchwork.ozlabs.org; Fri, 08 Sep 2017 05:11:34 -0400","from eggs.gnu.org ([2001:4830:134:3::10]:49002)\n\tby lists.gnu.org with esmtp (Exim 4.71)\n\t(envelope-from ) id 1dqFJM-0001C6-FO\n\tfor qemu-devel@nongnu.org; Fri, 08 Sep 2017 05:10:57 -0400","from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)\n\t(envelope-from ) id 1dqFJH-0002rz-Lq\n\tfor qemu-devel@nongnu.org; Fri, 08 Sep 2017 05:10:52 -0400","from mx1.redhat.com ([209.132.183.28]:60482)\n\tby eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32)\n\t(Exim 4.71) (envelope-from ) id 1dqFJH-0002p6-Er\n\tfor qemu-devel@nongnu.org; Fri, 08 Sep 2017 05:10:47 -0400","from smtp.corp.redhat.com\n\t(int-mx05.intmail.prod.int.phx2.redhat.com [10.5.11.15])\n\t(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))\n\t(No client certificate requested)\n\tby mx1.redhat.com (Postfix) with ESMTPS id 0FA514E909\n\tfor ; Fri, 8 Sep 2017 09:10:44 +0000 (UTC)","from vader.redhat.com (ovpn-117-133.ams2.redhat.com\n\t[10.36.117.133])\n\tby smtp.corp.redhat.com (Postfix) with ESMTP id ECFCF6AD05;\n\tFri, 8 Sep 2017 09:10:42 +0000 (UTC)"],"DMARC-Filter":"OpenDMARC Filter v1.3.2 mx1.redhat.com 0FA514E909","From":"Eduardo Otubo ","To":"qemu-devel@nongnu.org","Date":"Fri, 8 Sep 2017 11:10:22 +0200","Message-Id":"<20170908091027.9104-1-otubo@redhat.com>","X-Scanned-By":"MIMEDefang 2.79 on 10.5.11.15","X-Greylist":"Sender IP whitelisted, not delayed by milter-greylist-4.5.16\n\t(mx1.redhat.com [10.5.110.38]);\n\tFri, 08 Sep 2017 09:10:44 +0000 (UTC)","X-detected-operating-system":"by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic]\n\t[fuzzy]","X-Received-From":"209.132.183.28","Subject":"[Qemu-devel] [PATCHv5 0/6] seccomp: feature refactoring","X-BeenThere":"qemu-devel@nongnu.org","X-Mailman-Version":"2.1.21","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Cc":"thuth@redhat.com","Errors-To":"qemu-devel-bounces+incoming=patchwork.ozlabs.org@nongnu.org","Sender":"\"Qemu-devel\"\n\t"},"content":"v5:\n * replaced strcmp by g_str_equal\n * removed useless goto\n * fixed style problems\n\nv4:\n * include another field on the struct for the modes\n * remove priority\n * fixed typos\n * error handling for prctl\n * add allow|deny values for all options\n * error hanlding for wrong values for all options\n * change how binary values are treated\n * reformat help text\n\nv3:\n * Style problems fixed\n\nv2:\n * The semantics of the options \"allow/deny\" instead of booleans \"on/off\" remains. \n * Added option 'children' to elevateprivileges\n * Added documentation to docs/\n\nv1:\n * First version based on the discussion\n https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg03348.html\n\nEduardo Otubo (6):\n seccomp: changing from whitelist to blacklist\n seccomp: add obsolete argument to command line\n seccomp: add elevateprivileges argument to command line\n seccomp: add spawn argument to command line\n seccomp: add resourcecontrol argument to command line\n seccomp: adding documentation to new seccomp model\n\n docs/seccomp.txt | 31 +++++\n include/sysemu/seccomp.h | 8 +-\n qemu-options.hx | 26 +++-\n qemu-seccomp.c | 325 ++++++++++++++---------------------------------\n vl.c | 82 +++++++++++-\n 5 files changed, 235 insertions(+), 237 deletions(-)\n create mode 100644 docs/seccomp.txt"}