seccomp: add obsolete argument to command line

This patch introduces the argument [,obsolete=allow] to the `-sandbox on'
option. It allows Qemu to run safely on old system that still relies on
old system calls.

Signed-off-by: Eduardo Otubo <otubo@redhat.com>
This commit is contained in:
Eduardo Otubo 2017-03-01 23:17:29 +01:00
parent 1bd6152ae2
commit 2b716fa6d6
4 changed files with 53 additions and 5 deletions

View file

@ -16,8 +16,9 @@
#define QEMU_SECCOMP_H
#define QEMU_SECCOMP_SET_DEFAULT (1 << 0)
#define QEMU_SECCOMP_SET_OBSOLETE (1 << 1)
#include <seccomp.h>
int seccomp_start(void);
int seccomp_start(uint32_t seccomp_opts);
#endif