summaryrefslogtreecommitdiff
path: root/qemu-seccomp.c
AgeCommit message (Expand)AuthorFilesLines
2019-03-27seccomp: report more useful errors from seccompDaniel P. Berrangé1-7/+13
2019-03-27seccomp: don't kill process for resource control syscallsDaniel P. Berrangé1-7/+25
2019-01-22seccomp: Work-around GCC 4.x bug in gnu99 modeThomas Huth1-1/+2
2018-10-19seccomp: Clean up error reporting in parse_sandbox()Markus Armbruster1-9/+9
2018-09-26seccomp: check TSYNC host capabilityMarc-André Lureau1-1/+18
2018-08-23seccomp: set the seccomp filter to all threadsMarc-André Lureau1-0/+5
2018-08-23seccomp: prefer SCMP_ACT_KILL_PROCESS if availableMarc-André Lureau1-1/+30
2018-08-23seccomp: use SIGSYS signal instead of killing the threadMarc-André Lureau1-1/+1
2018-07-12seccomp: allow sched_setscheduler() with SCHED_IDLE policyMarc-André Lureau1-2/+10
2018-06-01sandbox: disable -sandbox if CONFIG_SECCOMP undefinedYi Min Zhao1-1/+120
2017-09-15seccomp: add resourcecontrol argument to command lineEduardo Otubo1-0/+11
2017-09-15seccomp: add spawn argument to command lineEduardo Otubo1-0/+4
2017-09-15seccomp: add elevateprivileges argument to command lineEduardo Otubo1-0/+11
2017-09-15seccomp: add obsolete argument to command lineEduardo Otubo1-1/+18
2017-09-15seccomp: changing from whitelist to blacklistEduardo Otubo1-232/+28
2016-09-21seccomp: adding getrusage to the whitelistEduardo Otubo1-0/+1
2016-04-16seccomp: adding sysinfo system call to whitelistMiroslav Rezanina1-0/+1
2016-04-16seccomp: Whitelist cacheflush since 2.2.0 not 2.2.3James Hogan1-3/+5
2016-02-04all: Clean up includesPeter Maydell1-1/+1
2015-11-16seccomp: add cacheflush to whitelistAndrew Jones1-1/+12
2015-10-22seccomp: add memfd_create to whitelistEduardo Otubo1-1/+2
2015-01-23seccomp: add mlockall to whitelistPaolo Bonzini1-0/+1
2015-01-05seccomp: add mbind() to the syscall whitelistPaul Moore1-1/+2
2014-11-11seccomp: whitelist syscalls fallocate(), fadvise64(), inotify_init1() and ino...Philipp Gesang1-1/+5
2014-08-21seccomp: add semctl() to the syscall whitelistPaul Moore1-1/+2
2014-04-25seccomp: add shmctl(), mlock(), and munlock() to the syscall whitelistPaul Moore1-1/+4
2014-04-25seccomp: add timerfd_create and timerfd_settime to the whitelistFelix Geyer1-1/+3
2014-01-20seccomp: add some basic shared memory syscalls to the whitelistPaul Moore1-1/+4
2014-01-20seccomp: add mkdir() and fchmod() to the whitelistPaul Moore1-1/+3
2013-12-20seccomp: exit if seccomp_init() failsCorey Bryant1-0/+1
2013-12-03seccomp: add kill() to the syscall whitelistPaul Moore1-0/+1
2013-09-24seccomp: fine tuning whitelist by adding times()Eduardo Otubo1-0/+1
2013-07-29seccomp: add arch_prctl() to the syscall whitelistPaul Moore1-1/+2
2013-07-29seccomp: add additional asynchronous I/O syscallsPaul Moore1-0/+2
2013-07-26seccomp: removing unused syscalls gtom whitelistEduardo Otubo1-4/+0
2013-07-26seccomp: no need to check arch in syscall whitelistEduardo Otubo1-13/+0
2013-05-30seccomp: add the asynchronous I/O syscalls to the whitelistPaul Moore1-1/+4
2012-12-19softmmu: move include files to include/sysemu/Paolo Bonzini1-1/+1
2012-11-30seccomp: adding new syscalls (bugzilla 855162)Eduardo Otubo1-17/+139
2012-08-16Adding qemu-seccomp.[ch] (v8)Eduardo Otubo1-0/+141