From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:51664) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Uz9fA-0005RN-4s for qemu-devel@nongnu.org; Tue, 16 Jul 2013 14:07:51 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Uz9f8-0000r8-KG for qemu-devel@nongnu.org; Tue, 16 Jul 2013 14:07:48 -0400 Received: from e24smtp05.br.ibm.com ([32.104.18.26]:55315) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Uz9f8-0000qF-8M for qemu-devel@nongnu.org; Tue, 16 Jul 2013 14:07:46 -0400 Received: from /spool/local by e24smtp05.br.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Tue, 16 Jul 2013 15:07:44 -0300 Received: from d24relay03.br.ibm.com (d24relay03.br.ibm.com [9.13.184.25]) by d24dlp01.br.ibm.com (Postfix) with ESMTP id 940563520055 for ; Tue, 16 Jul 2013 14:07:41 -0400 (EDT) Received: from d24av04.br.ibm.com (d24av04.br.ibm.com [9.8.31.97]) by d24relay03.br.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id r6GI6NUn28246022 for ; Tue, 16 Jul 2013 15:06:23 -0300 Received: from d24av04.br.ibm.com (localhost [127.0.0.1]) by d24av04.br.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id r6GI7eRP012316 for ; Tue, 16 Jul 2013 15:07:40 -0300 From: Eduardo Otubo Date: Tue, 16 Jul 2013 15:07:36 -0300 Message-Id: <1373998058-20012-1-git-send-email-otubo@linux.vnet.ibm.com> Subject: [Qemu-devel] seccomp: remove unused syscalls - for 1.6 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: pmoore@redhat.com, pbonzini@redhat.com, coreyb@linux.vnet.ibm.com Hello all, In this small patch series I basically: v2 update: - set libseccomp 2.1.0 as requirement on configure script. - removed setrlimit and added sendfile64 to the whitelist. 1) Remove the ifdef's for the (not so) new libseccomp version that does a best effort and translates x86_32 syscalls into x86_64 when possible. 2) Remove unused syscalls on the seccomp whitelist. For that removal, I've been running several instances of Qemu using a script written on top of virt-test[0]. After some weeks testing I could come up with this small list, and safely remove them without breaking anything. [0] - https://github.com/autotest/virt-test/wiki