Daniel P. Berrangé 5a2f693f07 seccomp: fix blocking of process spawning ... When '-sandbox on,spawn=deny' is given, we are supposed to block the ability to spawn processes. We naively blocked the 'fork' syscall, forgetting that any modern libc will use the 'clone' syscall instead. We can't simply block the 'clone' syscall though, as that will break thread creation. We thus list the set of flags used to create threads and block anything that doesn't match this exactly. Acked-by: Eduardo Otubo <otubo@redhat.com> Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>		2022-02-16 18:52:40 +00:00
..
avocado	tests/avocado: ppc: Add smoke tests for MPC7400 and MPC7450 families	2022-01-18 12:56:30 +01:00
bench	tests: Move benchmarks into a separate folder	2021-03-12 15:46:30 +01:00
data	ACPI ERST: step 6 of bios-tables-test.c	2022-02-06 04:33:50 -05:00
decode	decodetree: Extend argument set syntax to allow types	2021-05-01 11:45:35 -07:00
docker	linux-user: Remove the deprecated ppc64abi32 target	2022-02-09 13:29:38 +00:00
fp	build: use "meson test" as the test harness	2021-12-23 10:06:19 +01:00
guest-debug	chardev: do not use short form boolean options in non-QemuOpts character device descriptions	2021-02-25 15:41:53 +01:00
image-fuzzer	image-fuzzer: Use OSerror.strerror instead of tuple subscript	2019-11-05 16:36:11 +01:00
include	tests: add missing generated sources to testqapi	2020-10-17 10:45:50 -04:00
keys	tests/vm: Add Haiku test based on their vagrant images	2020-11-17 09:45:24 +01:00
lcitool	tests: Update CentOS 8 container to CentOS Stream 8	2022-02-09 12:08:42 +00:00
migration	tests/migration: fix unix socket migration	2021-07-14 14:15:52 +01:00
multiboot	Remove superfluous .gitignore files	2020-10-13 12:48:17 +02:00
perf/block/qcow2	tests/perf: Test lseek influence on qcow2 block-status	2019-06-04 15:20:41 +02:00
plugin	tests/plugins: add instruction matching to libinsn.so	2022-02-09 12:08:42 +00:00
qapi-schema	meson: drop sphinx_extn_depends	2021-11-08 12:27:23 +04:00
qemu-iotests	Block layer patches	2022-02-14 19:54:00 +00:00
qtest	tests/qtest: enable more vhost-user tests by default	2022-02-09 12:08:41 +00:00
rocker	tests: Avoid non-portable 'echo -ARG'	2017-07-11 17:45:00 +02:00
tcg	Fix safe_syscall_base for sparc64.	2022-02-14 15:24:26 +00:00
tsan	tests/docker: Added docker build support for TSan.	2020-06-16 14:49:05 +01:00
uefi-test-tools	Remove superfluous .gitignore files	2020-10-13 12:48:17 +02:00
unit	seccomp: fix blocking of process spawning	2022-02-16 18:52:40 +00:00
vm	FreeBSD: Upgrade to 12.3 release	2022-01-18 16:44:16 +00:00
vmstate-static-checker-data	hw: Replace anti-social QOM type names	2021-03-19 15:18:43 +01:00
check-block.sh	check-block: replace -makecheck with TAP output	2022-01-28 11:13:33 +01:00
dbus-vmstate-daemon.sh	tests: add dbus-vmstate-test	2020-01-06 18:41:32 +04:00
Makefile.include	tests/Makefile.include: clean-up old code	2022-02-09 12:08:41 +00:00
meson.build	* configure and meson fixes	2022-01-28 14:04:01 +00:00
requirements.txt	acceptance tests: bump Avocado version to 88.1	2021-06-01 16:21:21 -04:00
test-qht-par.c	clean-includes: run it once more	2016-06-16 18:39:03 +02:00
vhost-user-bridge.c	tests/vhost-user-bridge.c: Fix typo in help message	2021-09-04 17:34:05 -04:00