[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PULL 10/36] docker: Use unconfined security profile
From: |
Fam Zheng |
Subject: |
[Qemu-devel] [PULL 10/36] docker: Use unconfined security profile |
Date: |
Fri, 22 Sep 2017 15:46:33 +0800 |
Some by default blocked syscalls are required to run tests for example
userfaultfd.
Reviewed-by: Kashyap Chamarthy <address@hidden>
Signed-off-by: Fam Zheng <address@hidden>
Message-Id: <address@hidden>
Reviewed-by: Stefan Hajnoczi <address@hidden>
Based-on: address@hidden
---
tests/docker/Makefile.include | 1 +
1 file changed, 1 insertion(+)
diff --git a/tests/docker/Makefile.include b/tests/docker/Makefile.include
index 2c49930907..2bed4c0e00 100644
--- a/tests/docker/Makefile.include
+++ b/tests/docker/Makefile.include
@@ -145,6 +145,7 @@ docker-run: docker-qemu-src
$(call quiet-command, \
$(SRC_PATH)/tests/docker/docker.py run \
$(if $(NOUSER),,-u $(shell id -u)) -t \
+ --security-opt seccomp=unconfined \
$(if $V,,--rm) \
$(if $(DEBUG),-i,) \
$(if $(NETWORK),$(if $(subst
$(NETWORK),,1),--net=$(NETWORK)),--net=none) \
--
2.13.5
- [Qemu-devel] [PULL v5 00/36] Build and test automation patches, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 01/36] docker: ensure NOUSER for travis images, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 02/36] docker: docker.py make --no-cache skip checksum test, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 03/36] docker: don't install device-tree-compiler build-deps in travis.docker, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 04/36] docker: reduce noise when building travis.docker, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 06/36] docker: Enable features explicitly in test-full, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 05/36] docker: Update ubuntu image, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 07/36] tests/docker: Clean up paths, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 08/36] docker: Fix return code of build_qemu(), Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 09/36] docker: Add test_fail and prep_fail, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 10/36] docker: Use unconfined security profile,
Fam Zheng <=
- [Qemu-devel] [PULL 11/36] docker: Add nettle-devel to fedora image, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 12/36] docker: Add test-block, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 13/36] vl: Don't include vde header, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 15/36] buildsys: Move sdl cflags/libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 14/36] buildsys: Move vde libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 16/36] buildsys: Move audio libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 17/36] buildsys: Move libcacard cflags/libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 18/36] buildsys: Move libusb cflags/libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 19/36] buildsys: Move usb redir cflags/libs to per object, Fam Zheng, 2017/09/22
- [Qemu-devel] [PULL 20/36] buildsys: Move brlapi libs to per object, Fam Zheng, 2017/09/22