On 09/12/2012 04:03 AM, Ján Tomko wrote:
---
src/qemu/qemu_command.c | 11 +++++++++++
1 files changed, 11 insertions(+), 0 deletions(-)
diff --git a/src/qemu/qemu_command.c b/src/qemu/qemu_command.c
index a83d6de..c50c306 100644
--- a/src/qemu/qemu_command.c
+++ b/src/qemu/qemu_command.c
@@ -6462,6 +6462,17 @@ qemuBuildCommandLine(virConnectPtr conn,
? qemucmd->env_value[i] : "");
}
+ if (qemuCapsGet(qemuCaps, QEMU_CAPS_SECCOMP_SANDBOX)) {
+ if (driver->seccompSandbox == 0)
+ virCommandAddArgList(cmd, "-sandbox", "off", NULL);
+ else if (driver->seccompSandbox > 0)
+ virCommandAddArgList(cmd, "-sandbox", "on", NULL);
+ } else if (driver->seccompSandbox > 0) {
Should this be (driver->seccompSandbox >= 0) ?
+ virReportError(VIR_ERR_CONFIG_UNSUPPORTED, "%s",
+ _("QEMU does not support seccomp sandboxes"));
+ goto error;
+ }
+
return cmd;
no_memory:
--
Regards,
Corey Bryant
--
libvir-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/libvir-list
