Daniel P. Berrangé 5a2f693f07 seccomp: fix blocking of process spawning ... When '-sandbox on,spawn=deny' is given, we are supposed to block the ability to spawn processes. We naively blocked the 'fork' syscall, forgetting that any modern libc will use the 'clone' syscall instead. We can't simply block the 'clone' syscall though, as that will break thread creation. We thus list the set of flags used to create threads and block anything that doesn't match this exactly. Acked-by: Eduardo Otubo <otubo@redhat.com> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>		2022-02-16 18:52:40 +00:00
..
arch_init.c	meson.build: Define QEMU_ARCH in config-target.h	2021-08-26 17:02:00 +01:00
balloon.c	qapi: Restrict balloon-related commands to machine code	2020-09-29 15:41:35 +02:00
bootdevice.c	softmmu: move more files to softmmu/	2020-10-12 11:50:21 -04:00
cpu-throttle.c	cpu-throttle: Remove timer_mod() from cpu_throttle_set()	2021-02-08 15:15:32 +01:00
cpu-timers.c	icount: get rid of static variable	2021-04-01 09:40:45 +02:00
cpus.c	softmmu/cpus: Check if the cpu work list is empty atomically	2022-02-09 08:55:02 +11:00
datadir.c	vl: extract softmmu/datadir.c	2020-12-10 12:15:18 -05:00
device_tree.c	softmmu/device_tree: Remove redundant pointer assignment	2022-01-21 15:52:56 +10:00
dma-helpers.c	exec/memory: Extract address_space_set() from dma_memory_set()	2022-01-20 09:09:37 +01:00
globals.c	qmp: generalize watchdog-set-action to -no-reboot/-no-shutdown	2020-12-15 12:51:57 -05:00
icount.c	icount: get rid of static variable	2021-04-01 09:40:45 +02:00
ioport.c	softmmu: Add missing trace-events file	2020-09-09 17:15:18 +01:00
main.c	meson: move SDL and SDL-image detection to meson	2020-08-21 06:30:44 -04:00
memory_mapping.c	softmmu/memory_mapping: optimize for RamDiscardManager sections	2021-10-02 08:43:22 +02:00
memory.c	memory: Fix incorrect calls of log_global_start/stop	2022-01-18 10:45:35 +01:00
meson.build	seccomp: convert to meson	2021-01-06 10:21:20 +01:00
physmem.c	exec/memory: Extract address_space_set() from dma_memory_set()	2022-01-20 09:09:37 +01:00
qdev-monitor.c	pci,pc,virtio: bugfixes	2021-11-15 21:56:15 +01:00
qemu-seccomp.c	seccomp: fix blocking of process spawning	2022-02-16 18:52:40 +00:00
qtest.c	qtest: add a QOM object for qtest	2021-05-26 14:49:45 +02:00
rtc.c	rtc: Move RTC function prototypes to their own header	2022-01-28 14:29:46 +00:00
runstate-action.c	runstate: cleanup reboot and panic actions	2021-01-21 13:00:41 +01:00
runstate.c	runstate: Initialize Error * to NULL	2021-06-15 17:17:09 +02:00
timers-state.h	qemu/atomic: Add aligned_{int64,uint64}_t types	2021-07-21 07:45:38 -10:00
tpm.c	qapi: More complex uses of QAPI_LIST_APPEND	2021-01-28 08:08:45 +01:00
trace-events	memory: make global_dirty_tracking a bitmask	2021-11-01 22:56:43 +01:00
trace.h	softmmu: Add missing trace-events file	2020-09-09 17:15:18 +01:00
vl.c	softmmu: fix device deletion events with -device JSON syntax	2022-01-14 12:03:16 +01:00