Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-05 Thread Corey Bryant
On 11/02/2012 06:14 PM, Paul Moore wrote: On Friday, November 02, 2012 06:00:29 PM Corey Bryant wrote: On 11/02/2012 05:29 PM, Paul Moore wrote: On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-05 Thread Paul Moore
On Monday, November 05, 2012 09:39:46 AM Corey Bryant wrote: On 11/02/2012 06:14 PM, Paul Moore wrote: On Friday, November 02, 2012 06:00:29 PM Corey Bryant wrote: On 11/02/2012 05:29 PM, Paul Moore wrote: On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-05 Thread Corey Bryant
On 11/05/2012 04:58 PM, Paul Moore wrote: On Monday, November 05, 2012 09:39:46 AM Corey Bryant wrote: On 11/02/2012 06:14 PM, Paul Moore wrote: On Friday, November 02, 2012 06:00:29 PM Corey Bryant wrote: On 11/02/2012 05:29 PM, Paul Moore wrote: On Tuesday, October 23, 2012 03:55:31 AM

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-02 Thread Paul Moore
On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to main_loop_ctx * seccomp_on now inside ifdef *

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-02 Thread Corey Bryant
On 11/02/2012 05:29 PM, Paul Moore wrote: On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to main_loop_ctx

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-02 Thread Anthony Liguori
Paul Moore pmo...@redhat.com writes: On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to main_loop_ctx

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-11-02 Thread Paul Moore
On Friday, November 02, 2012 06:00:29 PM Corey Bryant wrote: On 11/02/2012 05:29 PM, Paul Moore wrote: On Tuesday, October 23, 2012 03:55:31 AM Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-10-25 Thread Eduardo Otubo
On Tue, Oct 23, 2012 at 11:10:58AM -0400, Corey Bryant wrote: On 10/23/2012 01:55 AM, Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-10-24 Thread Eduardo Otubo
On Tue, Oct 23, 2012 at 11:10:58AM -0400, Corey Bryant wrote: On 10/23/2012 01:55 AM, Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to

Re: [Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-10-23 Thread Corey Bryant
On 10/23/2012 01:55 AM, Eduardo Otubo wrote: This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to main_loop_ctx * seccomp_on now inside ifdef * open syscall added

[Qemu-devel] [PATCHv2 3/4] Support for double whitelist filters

2012-10-22 Thread Eduardo Otubo
This patch includes a second whitelist right before the main loop. It's a smaller and more restricted whitelist, excluding execve() among many others. v2: * ctx changed to main_loop_ctx * seccomp_on now inside ifdef * open syscall added to the main_loop whitelist Signed-off-by: Eduardo