diff options
| author | Daniel P. Berrangé <berrange@redhat.com> | 2021-04-29 11:25:13 +0100 |
|---|---|---|
| committer | Daniel P. Berrangé <berrange@redhat.com> | 2022-02-16 18:52:40 +0000 |
| commit | 463805711056b431a74917a75cda75ec67fec3d2 (patch) | |
| tree | 5ca2564e546f23ecc6964479e6fc8ab20b153b60 /scripts/qemugdb/tcg.py | |
| parent | c542b302707628609f2a33bcbd3e442282806b8e (diff) | |
| download | focaccia-qemu-463805711056b431a74917a75cda75ec67fec3d2.tar.gz focaccia-qemu-463805711056b431a74917a75cda75ec67fec3d2.zip | |
seccomp: block setns, unshare and execveat syscalls
setns/unshare are used to change namespaces which is not something QEMU needs to be able todo. execveat is a new variant of execve so should be blocked just like execve already is. Acked-by: Eduardo Otubo <otubo@redhat.com> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Diffstat (limited to 'scripts/qemugdb/tcg.py')
0 files changed, 0 insertions, 0 deletions