motorhead/qemu
1
0
Fork 0
mirror of https://github.com/Motorhead1991/qemu.git synced 2025-08-09 18:44:58 -06:00
Code Issues Projects Releases Packages Wiki Activity Actions

tools/virtiofsd: Replace the word 'whitelist'

Browse source 
Follow the inclusive terminology from the "Conscious Language in your
Open Source Projects" guidelines [*] and replace the words "whitelist"
appropriately.

[*] https://github.com/conscious-lang/conscious-lang-docs/blob/main/faq.md

Reviewed-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20210205171817.2108907-3-philmd@redhat.com>
Signed-off-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
This commit is contained in:
Philippe Mathieu-Daudé 2021-02-05 18:18:11 +01:00 • committed by Dr. David Alan Gilbert
parent 525a3030a8
commit a65963efa3
2 changed files with 9 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

6
tools/virtiofsd/passthrough_ll.c
View file

@ -3204,7 +3204,7 @@ static void setup_mounts(const char *source)
} }
/* /*
* Only keep whitelisted capabilities that are needed for file system operation * Only keep capabilities in allowlist that are needed for file system operation
* The (possibly NULL) modcaps_in string passed in is free'd before exit. * The (possibly NULL) modcaps_in string passed in is free'd before exit.
*/ */
static void setup_capabilities(char *modcaps_in) static void setup_capabilities(char *modcaps_in)
@ -3214,8 +3214,8 @@ static void setup_capabilities(char *modcaps_in)
capng_restore_state(&cap.saved); capng_restore_state(&cap.saved);
/* /*
* Whitelist file system-related capabilities that are needed for a file * Add to allowlist file system-related capabilities that are needed for a
* server to act like root. Drop everything else like networking and * file server to act like root. Drop everything else like networking and
* sysadmin capabilities. * sysadmin capabilities.
* *
* Exclusions: * Exclusions:

12
tools/virtiofsd/passthrough_seccomp.c
View file

@ -21,7 +21,7 @@
#endif #endif
#endif #endif
static const int syscall_whitelist[] = { static const int syscall_allowlist[] = {
/* TODO ireg sem*() syscalls */ /* TODO ireg sem*() syscalls */
SCMP_SYS(brk), SCMP_SYS(brk),
SCMP_SYS(capget), /* For CAP_FSETID */ SCMP_SYS(capget), /* For CAP_FSETID */
@ -117,12 +117,12 @@ static const int syscall_whitelist[] = {
}; };
/* Syscalls used when --syslog is enabled */ /* Syscalls used when --syslog is enabled */
static const int syscall_whitelist_syslog[] = { static const int syscall_allowlist_syslog[] = {
SCMP_SYS(send), SCMP_SYS(send),
SCMP_SYS(sendto), SCMP_SYS(sendto),
}; };
static void add_whitelist(scmp_filter_ctx ctx, const int syscalls[], size_t len) static void add_allowlist(scmp_filter_ctx ctx, const int syscalls[], size_t len)
{ {
size_t i; size_t i;
@ -153,10 +153,10 @@ void setup_seccomp(bool enable_syslog)
exit(1); exit(1);
} }
add_whitelist(ctx, syscall_whitelist, G_N_ELEMENTS(syscall_whitelist)); add_allowlist(ctx, syscall_allowlist, G_N_ELEMENTS(syscall_allowlist));
if (enable_syslog) { if (enable_syslog) {
add_whitelist(ctx, syscall_whitelist_syslog, add_allowlist(ctx, syscall_allowlist_syslog,
G_N_ELEMENTS(syscall_whitelist_syslog)); G_N_ELEMENTS(syscall_allowlist_syslog));
} }
/* libvhost-user calls this for post-copy migration, we don't need it */ /* libvhost-user calls this for post-copy migration, we don't need it */