[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL v2 22/37] docker: Use unconfined security profile
From: |
Fam Zheng |
Subject: |
[Qemu-devel] [PULL v2 22/37] docker: Use unconfined security profile |
Date: |
Sat, 9 Sep 2017 13:45:58 +0800 |
Some by default blocked syscalls are required to run tests for example
userfaultfd.
Reviewed-by: Kashyap Chamarthy <address@hidden>
Signed-off-by: Fam Zheng <address@hidden>
Message-Id: <address@hidden>
Reviewed-by: Stefan Hajnoczi <address@hidden>
Based-on: address@hidden
---
tests/docker/Makefile.include | 1 +
1 file changed, 1 insertion(+)
diff --git a/tests/docker/Makefile.include b/tests/docker/Makefile.include
index 4bb02b1bb5..0e4f159619 100644
--- a/tests/docker/Makefile.include
+++ b/tests/docker/Makefile.include
@@ -135,6 +135,7 @@ docker-run: docker-qemu-src
$(call quiet-command, \
$(SRC_PATH)/tests/docker/docker.py run \
$(if $(NOUSER),,-u $(shell id -u)) -t \
+ --security-opt seccomp=unconfined \
$(if $V,,--rm) \
$(if $(DEBUG),-i,) \
$(if $(NETWORK),$(if $(subst
$(NETWORK),,1),--net=$(NETWORK)),--net=none) \
--
2.13.5
- [Qemu-devel] [PULL v2 12/37] tests: Add ubuntu.i386 image, (continued)
- [Qemu-devel] [PULL v2 12/37] tests: Add ubuntu.i386 image, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 13/37] tests: Add FreeBSD image, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 14/37] tests: Add NetBSD image, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 16/37] Makefile: Add rules to run vm tests, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 15/37] tests: Add OpenBSD image, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 17/37] MAINTAINERS: Add tests/vm entry, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 19/37] docker: Use archive-source.py, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 18/37] tests: Add README for vm tests, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 20/37] docker: Fix return code of build_qemu(), Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 21/37] docker: Add test_fail and prep_fail, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 22/37] docker: Use unconfined security profile,
Fam Zheng <=
- [Qemu-devel] [PULL v2 23/37] docker: Add nettle-devel to fedora image, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 26/37] vl: Don't include vde header, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 24/37] docker: Add test-block, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 25/37] docker: Drop 'set -e' from run script, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 27/37] buildsys: Move vde libs to per object, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 28/37] buildsys: Move gtk/vte cflags/libs to per object, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 29/37] buildsys: Move sdl cflags/libs to per object, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 31/37] buildsys: Move audio libs to per object, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 30/37] buildsys: Move vnc cflags/libs to per object, Fam Zheng, 2017/09/09
- [Qemu-devel] [PULL v2 32/37] buildsys: Move curese cflags/libs to per object, Fam Zheng, 2017/09/09