[libvirt] [PATCH] qemu: assume seccomp sandbox is supported since qemu 1.2

Ján Tomko jtomko at redhat.com
Mon Dec 10 15:28:55 UTC 2012


Currently there is no way to detect it via QMP and requesting "-sandbox
off" works correctly even if it was compiled out, so this will work
unless someone both requests the sandbox in qemu.conf and builds QEMU
without the support for it.
---
Relevant discussion in qemu-devel:
http://lists.nongnu.org/archive/html/qemu-devel/2012-12/msg00101.html
---
 src/qemu/qemu_capabilities.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/src/qemu/qemu_capabilities.c b/src/qemu/qemu_capabilities.c
index 01a1b98..98e65f1 100644
--- a/src/qemu/qemu_capabilities.c
+++ b/src/qemu/qemu_capabilities.c
@@ -2283,6 +2283,7 @@ qemuCapsInitQMPBasic(qemuCapsPtr caps)
     qemuCapsSet(caps, QEMU_CAPS_WAKEUP);
     qemuCapsSet(caps, QEMU_CAPS_NO_USER_CONFIG);
     qemuCapsSet(caps, QEMU_CAPS_NETDEV_BRIDGE);
+    qemuCapsSet(caps, QEMU_CAPS_SECCOMP_SANDBOX);
 }
 
 
-- 
1.7.8.6




More information about the libvir-list mailing list