]> git.ipfire.org Git - thirdparty/qemu.git/commit - qemu-options.hx
projects / thirdparty / qemu.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2b716fa) | patch
seccomp: add elevateprivileges argument to command line
authorEduardo Otubo <otubo@redhat.com>
Mon, 13 Mar 2017 21:13:27 +0000 (22:13 +0100)
committerEduardo Otubo <otubo@redhat.com>
Fri, 15 Sep 2017 08:15:06 +0000 (10:15 +0200)
commit73a1e647256b09734ce64ef7a6001a0db03f7106
tree522eda09d8df57747caf6acc9ecd4b3a61e4ecc3tree | snapshot
parent2b716fa6d63a183a42b789595c3944f53c0ded7ccommit | diff
seccomp: add elevateprivileges argument to command line

This patch introduces the new argument
[,elevateprivileges=allow|deny|children] to the `-sandbox on'. It allows
or denies Qemu process to elevate its privileges by blacklisting all
set*uid|gid system calls. The 'children' option will let forks and
execves run unprivileged.

Signed-off-by: Eduardo Otubo <otubo@redhat.com>
include/sysemu/seccomp.h diff | blob | blame | history
qemu-options.hx diff | blob | blame | history
qemu-seccomp.c diff | blob | blame | history
vl.c diff | blob | blame | history
Mirror of https://git.qemu.org/git/qemu.git