Re: libseccomp and KVM

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks.

How are the rules managed so as to fit the VM system calls?
Is tuning possible? recommended?

Regards,

2014-12-09 17:32 GMT+01:00 Michal Privoznik <mprivozn@xxxxxxxxxx>:
On 09.12.2014 15:24, Raymond Durand wrote:
How is libseccomp used/enabled/configured with KVM/QEMU Hypervisor?

You need to set  seccomp_sandbox=1 in /etc/libvirt/qemu.conf and restart libvirtd. From now on, any qemu/kvm guest that libvirt starts will use seccomp or fail if qemu binary doesn't support it.

Michal
--
libvir-list mailing list
libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list

[Index of Archives]     [Virt Tools]     [Libvirt Users]     [Lib OS Info]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Fedora Tools]