summaryrefslogtreecommitdiffstats
path: root/qemu-options.hx
diff options
context:
space:
mode:
authorEduardo Otubo2012-08-14 23:44:08 +0200
committerAnthony Liguori2012-08-16 20:41:16 +0200
commit7d76ad4fa4405bb20c35fd24c3c848d2bc48f694 (patch)
tree647c18a62aa16508fcb15b2a61bd91de3bee3c36 /qemu-options.hx
parentAdding seccomp calls to vl.c (v8) (diff)
downloadqemu-7d76ad4fa4405bb20c35fd24c3c848d2bc48f694.tar.gz
qemu-7d76ad4fa4405bb20c35fd24c3c848d2bc48f694.tar.xz
qemu-7d76ad4fa4405bb20c35fd24c3c848d2bc48f694.zip
Command line support for seccomp with -sandbox (v8)
Signed-off-by: Eduardo Otubo <otubo@linux.vnet.ibm.com> Signed-off-by: Anthony Liguori <aliguori@us.ibm.com> --- v7 -> v8 - Parse options correctly (aliguori)
Diffstat (limited to 'qemu-options.hx')
-rw-r--r--qemu-options.hx10
1 files changed, 10 insertions, 0 deletions
diff --git a/qemu-options.hx b/qemu-options.hx
index 6aeef6a845..3c411c427e 100644
--- a/qemu-options.hx
+++ b/qemu-options.hx
@@ -2723,6 +2723,16 @@ STEXI
Old param mode (ARM only).
ETEXI
+DEF("sandbox", HAS_ARG, QEMU_OPTION_sandbox, \
+ "-sandbox <arg> Enable seccomp mode 2 system call filter (default 'off').\n",
+ QEMU_ARCH_ALL)
+STEXI
+@item -sandbox
+@findex -sandbox
+Enable Seccomp mode 2 system call filter. 'on' will enable syscall filtering and 'off' will
+disable it. The default is 'off'.
+ETEXI
+
DEF("readconfig", HAS_ARG, QEMU_OPTION_readconfig,
"-readconfig <file>\n", QEMU_ARCH_ALL)
STEXI