[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH for-1.7] seccomp: setting "-sandbox on" by defau
From: |
Stefan Hajnoczi |
Subject: |
Re: [Qemu-devel] [PATCH for-1.7] seccomp: setting "-sandbox on" by default |
Date: |
Wed, 4 Dec 2013 10:39:46 +0100 |
User-agent: |
Mutt/1.5.21 (2010-09-15) |
On Fri, Nov 22, 2013 at 11:00:24AM -0500, Paul Moore wrote:
> > Developers will only be happy with seccomp if it's easy and rewarding to
> > support/debug.
>
> Agreed.
>
> As a developer, how do you feel about the audit/syslog based approach I
> mentioned earlier?
I used the commands you posted (I think that's what you mean). They
produce useful output.
The problem is that without an error message on stderr or from the
shell, no one will think "QEMU process dead and hung == check seccomp"
immediately. It's frustrating to deal with a "silent" failure.
Stefan
- Re: [Qemu-devel] [PATCH for-1.7] seccomp: setting "-sandbox on" by default,
Stefan Hajnoczi <=