Go to file
Eduardo Otubo 1bd6152ae2 seccomp: changing from whitelist to blacklist
This patch changes the default behavior of the seccomp filter from
whitelist to blacklist. By default now all system calls are allowed and
a small black list of definitely forbidden ones was created.

Signed-off-by: Eduardo Otubo <otubo@redhat.com>
2017-09-15 10:13:35 +02:00
accel tcg: Infrastructure for managing constant pools 2017-09-07 11:57:35 -07:00
audio trace-events: fix code style: %# -> 0x% 2017-08-01 12:13:07 +01:00
backends QAPI patches for 2017-09-01 2017-09-04 13:28:09 +01:00
block nbd patches for 2017-09-06 2017-09-07 17:53:59 +01:00
bsd-user maint: Include bug-reporting info in --help output 2017-08-08 17:28:53 +02:00
chardev qapi: Mechanically convert FOO_lookup[...] to FOO_str(...) 2017-09-04 13:09:13 +02:00
contrib libvhost-user: support resuming vq->last_avail_idx based on used_idx 2017-09-08 16:15:17 +03:00
crypto qapi: Change data type of the FOO_lookup generated for enum FOO 2017-09-04 13:09:13 +02:00
default-configs ppc4xx_i2c: Move to hw/i2c 2017-09-08 09:30:55 +10:00
disas disas/i386: Add disassembly of rorx 2017-09-06 07:19:00 -07:00
docs docs: update documentation considering PCIE-PCI bridge 2017-09-08 16:15:17 +03:00
dtc@558cd81bdd
fpu softfloat: define floatx80_round() 2017-06-29 20:27:39 +02:00
fsdev fsdev: fix memory leak in main() 2017-09-05 14:01:16 +02:00
gdb-xml s390x/gdb: add gs registers 2017-07-14 12:29:49 +02:00
hw HMP pull 2017-09-14 2017-09-14 16:33:02 +01:00
include seccomp: changing from whitelist to blacklist 2017-09-15 10:13:35 +02:00
io io: Add new qio_channel_read{, v}_all_eof functions 2017-09-06 10:11:54 -05:00
libdecnumber decnumber: use DIV_ROUND_UP 2017-08-31 12:29:07 +02:00
linux-headers Revert "kvm: use DIV_ROUND_UP" 2017-09-05 18:55:40 +01:00
linux-user sparc: embed sparc_def_t into CPUSPARCState 2017-09-01 11:54:24 -03:00
migration migration: dump str in migrate_set_state trace 2017-09-06 16:36:38 +01:00
nbd nbd: Use new qio_channel_*_all() functions 2017-09-06 10:11:54 -05:00
net colo-compare: Use IOThread to Check old packet regularly and Process pactkets of the primary 2017-09-08 09:34:31 +08:00
pc-bios Update OpenBIOS images to 314d4f8 built from submodule. 2017-09-11 07:43:34 +01:00
po
qapi block: add throttle block filter driver 2017-09-06 10:12:02 +02:00
qga maint: Include bug-reporting info in --help output 2017-08-08 17:28:53 +02:00
qobject qlit: Tighten QLit list vs QList comparison 2017-09-04 13:09:12 +02:00
qom boards.h: Define new flag ignore_memory_transaction_failures 2017-09-07 13:54:54 +01:00
replay -----BEGIN PGP SIGNATURE----- 2017-06-05 10:09:14 +01:00
roms Update OpenBIOS images to 314d4f8 built from submodule. 2017-09-11 07:43:34 +01:00
scripts hw/ppc/spapr_cpu_core: Add a proper check for spapr machine 2017-09-08 09:30:55 +10:00
slirp slirp: fix clearing ifq_so from pending packets 2017-08-30 23:14:34 +01:00
stubs qmp: introduce query-memory-size-summary command 2017-09-14 15:52:10 +01:00
target hmp: fix "dump-quest-memory" segfault (arm) 2017-09-14 15:52:10 +01:00
tcg tcg/tci: do not use ldst label (never implemented) 2017-09-11 19:24:05 +01:00
tests tests/hmp: test "none" machine with memory 2017-09-14 15:52:10 +01:00
trace trace: add trace_event_get_state_backends() 2017-08-01 12:13:07 +01:00
ui console: add question-mark escape operator 2017-09-13 10:17:26 +02:00
util configure: Drop AIX host support 2017-09-07 19:02:30 +01:00
.dir-locals.el
.editorconfig add editorconfig 2017-07-20 09:56:56 +02:00
.exrc
.gdbinit .gdbinit: load QEMU sub-commands when gdb starts 2017-06-07 14:38:45 +01:00
.gitignore coccinelle: ignore ASTs pre-parsed cached C files 2017-07-19 14:45:15 -07:00
.gitmodules pixman: drop submodule 2017-09-13 10:15:43 +02:00
.mailmap
.shippable.yml shippable: add win32/64 targets 2017-07-18 10:58:36 +01:00
.travis.yml travis: move make -j flag out of script 2017-07-18 09:39:19 +01:00
arch_init.c audio: Rename hw/audio/audio.h to hw/audio/soundhw.h 2017-05-19 10:48:54 +02:00
atomic_template.h
balloon.c
block.c block: remove unused bdrv_media_changed 2017-09-04 18:31:13 +02:00
blockdev-nbd.c nbd: Fix regression on resiliency to port scan 2017-06-15 11:04:05 +02:00
blockdev.c block: move ThrottleGroup membership to ThrottleGroupMember 2017-09-05 16:47:51 +02:00
blockjob.c qapi: Mechanically convert FOO_lookup[...] to FOO_str(...) 2017-09-04 13:09:13 +02:00
bootdevice.c Makefile: Move bootdevice.o to common-obj-y 2017-07-04 14:39:27 +02:00
bt-host.c
bt-vhci.c
Changelog
CODING_STYLE coding_style: add point about 0x in trace-events 2017-08-01 12:13:07 +01:00
configure usb: misc small fixes. 2017-09-14 15:49:30 +01:00
COPYING
COPYING.LIB
COPYING.PYTHON scripts: add argparse module for Python 2.6 compatibility 2017-08-30 12:02:11 +01:00
cpus-common.c
cpus.c Convert error_report() to warn_report() 2017-07-13 13:49:58 +02:00
device_tree.c device_tree: fix compiler warnings (clang 5) 2017-05-07 09:57:51 +03:00
device-hotplug.c
disas.c tcg: Remove support for ia64 as host 2017-09-05 12:39:25 -07:00
dma-helpers.c
dump.c dump: do not dump non-existent guest memory 2017-09-14 15:52:10 +01:00
exec.c exec: Add lock parameter to qemu_ram_ptr_length 2017-08-01 17:27:33 +02:00
gdbstub.c Use qemu_tolower() and qemu_toupper(), not tolower() and toupper() 2017-07-21 10:32:41 +01:00
HACKING
hax-stub.c
hmp-commands-info.hx hmp: introduce 'info memory_size_summary' command 2017-09-14 15:52:10 +01:00
hmp-commands.hx s390x/kvm/migration/cpumodel: fixes, enhancements and cleanups 2017-07-14 14:19:35 +01:00
hmp.c hmp: introduce 'info memory_size_summary' command 2017-09-14 15:52:10 +01:00
hmp.h hmp: introduce 'info memory_size_summary' command 2017-09-14 15:52:10 +01:00
ioport.c
iothread.c qemu-iothread: IOThread supports the GMainContext event loop 2017-09-08 09:32:48 +08:00
LICENSE
MAINTAINERS MAINTAINERS: add missing USB entry 2017-09-13 10:42:24 +02:00
Makefile pixman: drop submodule 2017-09-13 10:15:43 +02:00
Makefile.objs configure: Don't build ivshmem tools unless CONFIG_IVSHMEM is set 2017-07-20 14:58:19 +01:00
Makefile.target trace: ensure .stp files are rebuilt if trace tool source changes 2017-08-01 10:36:29 +01:00
memory_ldst.inc.c
memory_mapping.c dump: fix memory_mapping_filter leak 2017-06-04 18:42:55 +03:00
memory.c migration: optimize the downtime 2017-08-01 17:27:33 +02:00
module-common.c
monitor.c hmp: extend "info numa" with hotplugged memory information 2017-09-14 15:52:10 +01:00
numa.c hmp: extend "info numa" with hotplugged memory information 2017-09-14 15:52:10 +01:00
os-posix.c Revert "rcu: do not create thread in pthread_atfork callback" 2017-08-08 10:40:19 +02:00
os-win32.c shutdown: Add source information to SHUTDOWN and RESET 2017-05-23 13:28:17 +02:00
qapi-schema.json qmp: introduce query-memory-size-summary command 2017-09-14 15:52:10 +01:00
qdev-monitor.c migration: Move remaining exported functions to migration/misc.h 2017-06-13 11:00:45 +02:00
qdict-test-data.txt
qemu-bridge-helper.c
qemu-doc.texi qemu-doc: Add UUID support in initiator name 2017-08-30 13:47:53 +01:00
qemu-ga.texi
qemu-img-cmds.hx qemu-img: Sort sub-command names in --help 2017-08-08 17:28:53 +02:00
qemu-img.c qapi: Change data type of the FOO_lookup generated for enum FOO 2017-09-04 13:09:13 +02:00
qemu-img.texi qemu-img: Check for backing image if specified during create 2017-07-18 15:27:37 +02:00
qemu-io-cmds.c qemu-io: Allow reopen read-write 2017-08-08 15:19:16 +02:00
qemu-io.c maint: Include bug-reporting info in --help output 2017-08-08 17:28:53 +02:00
qemu-nbd.c qapi: Change data type of the FOO_lookup generated for enum FOO 2017-09-04 13:09:13 +02:00
qemu-nbd.texi
qemu-option-trace.texi
qemu-options-wrapper.h
qemu-options.h
qemu-options.hx qemu-options: document existance of versioned machine types 2017-08-01 17:27:33 +02:00
qemu-seccomp.c seccomp: changing from whitelist to blacklist 2017-09-15 10:13:35 +02:00
qemu-tech.texi
qemu.nsi
qemu.sasl Default to GSSAPI (Kerberos) instead of DIGEST-MD5 for SASL 2017-05-09 14:41:47 +01:00
qmp.c qmp: introduce query-memory-size-summary command 2017-09-14 15:52:10 +01:00
qtest.c char: add backend hotswap handler 2017-07-14 11:04:33 +02:00
README
replication.c
replication.h
rules.mak docs: create interop/ subdirectory 2017-06-15 11:18:39 +02:00
softmmu_template.h cputlb: Support generating CPU exceptions on memory transaction failures 2017-09-04 15:21:55 +01:00
thunk.c thunk: assert nb_fields is valid 2017-07-31 13:06:39 +03:00
tpm.c qapi: Change data type of the FOO_lookup generated for enum FOO 2017-09-04 13:09:13 +02:00
trace-events trace-events: fix code style: %# -> 0x% 2017-08-01 12:13:07 +01:00
user-exec-stub.c
user-exec.c Replace 'struct ucontext' with 'ucontext_t' type 2017-07-20 10:10:28 +01:00
VERSION Open 2.11 development tree 2017-08-30 23:10:38 +01:00
version.rc
vl.c seccomp: changing from whitelist to blacklist 2017-09-15 10:13:35 +02:00

         QEMU README
         ===========

QEMU is a generic and open source machine & userspace emulator and
virtualizer.

QEMU is capable of emulating a complete machine in software without any
need for hardware virtualization support. By using dynamic translation,
it achieves very good performance. QEMU can also integrate with the Xen
and KVM hypervisors to provide emulated hardware while allowing the
hypervisor to manage the CPU. With hypervisor support, QEMU can achieve
near native performance for CPUs. When QEMU emulates CPUs directly it is
capable of running operating systems made for one machine (e.g. an ARMv7
board) on a different machine (e.g. an x86_64 PC board).

QEMU is also capable of providing userspace API virtualization for Linux
and BSD kernel interfaces. This allows binaries compiled against one
architecture ABI (e.g. the Linux PPC64 ABI) to be run on a host using a
different architecture ABI (e.g. the Linux x86_64 ABI). This does not
involve any hardware emulation, simply CPU and syscall emulation.

QEMU aims to fit into a variety of use cases. It can be invoked directly
by users wishing to have full control over its behaviour and settings.
It also aims to facilitate integration into higher level management
layers, by providing a stable command line interface and monitor API.
It is commonly invoked indirectly via the libvirt library when using
open source applications such as oVirt, OpenStack and virt-manager.

QEMU as a whole is released under the GNU General Public License,
version 2. For full licensing details, consult the LICENSE file.


Building
========

QEMU is multi-platform software intended to be buildable on all modern
Linux platforms, OS-X, Win32 (via the Mingw64 toolchain) and a variety
of other UNIX targets. The simple steps to build QEMU are:

  mkdir build
  cd build
  ../configure
  make

Additional information can also be found online via the QEMU website:

  http://qemu-project.org/Hosts/Linux
  http://qemu-project.org/Hosts/Mac
  http://qemu-project.org/Hosts/W32


Submitting patches
==================

The QEMU source code is maintained under the GIT version control system.

   git clone git://git.qemu-project.org/qemu.git

When submitting patches, the preferred approach is to use 'git
format-patch' and/or 'git send-email' to format & send the mail to the
qemu-devel@nongnu.org mailing list. All patches submitted must contain
a 'Signed-off-by' line from the author. Patches should follow the
guidelines set out in the HACKING and CODING_STYLE files.

Additional information on submitting patches can be found online via
the QEMU website

  http://qemu-project.org/Contribute/SubmitAPatch
  http://qemu-project.org/Contribute/TrivialPatches


Bug reporting
=============

The QEMU project uses Launchpad as its primary upstream bug tracker. Bugs
found when running code built from QEMU git or upstream released sources
should be reported via:

  https://bugs.launchpad.net/qemu/

If using QEMU via an operating system vendor pre-built binary package, it
is preferable to report bugs to the vendor's own bug tracker first. If
the bug is also known to affect latest upstream code, it can also be
reported via launchpad.

For additional information on bug reporting consult:

  http://qemu-project.org/Contribute/ReportABug


Contact
=======

The QEMU community can be contacted in a number of ways, with the two
main methods being email and IRC

 - qemu-devel@nongnu.org
   http://lists.nongnu.org/mailman/listinfo/qemu-devel
 - #qemu on irc.oftc.net

Information on additional methods of contacting the community can be
found online via the QEMU website:

  http://qemu-project.org/Contribute/StartHere

-- End