Yi Min Zhao 0dd693ef1f sandbox: disable -sandbox if CONFIG_SECCOMP undefined ... If CONFIG_SECCOMP is undefined, the option 'elevateprivileges' remains compiled. This would make libvirt set the corresponding capability and then trigger failure during guest startup. This patch moves the code regarding seccomp command line options to qemu-seccomp.c file and wraps qemu_opts_foreach finding sandbox option with CONFIG_SECCOMP. Because parse_sandbox() is moved into qemu-seccomp.c file, change seccomp_start() to static function. Signed-off-by: Yi Min Zhao <zyimin@linux.ibm.com> Reviewed-by: Ján Tomko <jtomko@redhat.com> Tested-by: Ján Tomko <jtomko@redhat.com> Acked-by: Eduardo Otubo <otubo@redhat.com> Message-Id: <20180531032937.1925-1-zyimin@linux.ibm.com> Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>		2018-05-31 19:12:13 +02:00
..
accel.h	AccelClass: Introduce accel_setup_post	2018-04-26 16:29:50 +01:00
arch_init.h	RISC-V Build Infrastructure	2018-03-07 08:30:28 +13:00
balloon.h	qapi: Empty out qapi-schema.json	2018-03-02 13:45:50 -06:00
block-backend.h	block: Introduce buf register API	2018-02-08 09:22:03 +08:00
blockdev.h	blockdev: Make orphaned -drive fatal	2017-02-21 13:17:45 +01:00
bt.h	Clean up header guards that don't match their file name	2016-07-12 16:19:16 +02:00
cpus.h	migration: Mark CPU states dirty before incoming migration/loadvm	2017-06-06 08:53:24 +10:00
cryptodev-vhost-user.h	cryptodev-vhost-user: set the key length	2018-03-01 18:26:17 +02:00
cryptodev-vhost.h	cryptodev: add vhost-user as a new cryptodev backend	2018-03-01 18:26:17 +02:00
cryptodev.h	cryptodev: add vhost support	2018-03-01 18:26:17 +02:00
device_tree.h	Clean up ill-advised or unusual header guards	2016-07-12 16:20:46 +02:00
dma.h	dma-helpers: explicitly pass alignment into DMA helpers	2016-10-27 16:29:13 -04:00
dump-arch.h	dump: allow target to set the physical base	2016-01-15 14:40:25 +00:00
dump.h	qapi: Empty out qapi-schema.json	2018-03-02 13:45:50 -06:00
hax.h	hax: Support guest RAM sizes of 4GB or more	2018-02-13 11:44:13 +01:00
hostmem.h	memdev: remove "id" property	2018-05-09 00:13:37 +02:00
hvf.h	Clean up includes	2018-02-09 05:05:11 +01:00
hw_accel.h	Add the WHPX acceleration enlightenments	2018-02-07 14:09:26 +01:00
iothread.h	vl: introduce vm_shutdown()	2018-03-08 17:38:51 +00:00
kvm_int.h	kvm-all: add support for multiple address spaces	2015-07-06 17:59:43 +02:00
kvm.h	x86/cpu: use standard-headers/asm-x86.kvm_para.h	2018-05-23 03:14:41 +03:00
memory_mapping.h	Use scripts/clean-includes to drop redundant qemu/typedefs.h	2016-03-22 22:20:16 +01:00
numa.h	Move include qemu/option.h from qemu-common.h to actual users	2018-02-09 13:52:16 +01:00
os-posix.h	util: drop old utimensat() compat code	2017-05-25 10:30:14 +02:00
os-win32.h	log: Add locking to large logging blocks	2016-11-01 10:29:03 -06:00
qtest.h	include: Clean up includes	2016-02-23 12:43:05 +00:00
replay.h	replay: make locking visible outside replay code	2018-03-12 16:12:50 +01:00
reset.h	hw: move reset handlers from vl.c to hw/core	2017-01-16 17:52:35 +01:00
rng-random.h	rng-random: rename RndRandom to RngRandom	2016-05-23 12:18:43 +05:30
rng.h	rng: switch request queue to QSIMPLEQ	2016-03-08 12:54:14 +05:30
seccomp.h	sandbox: disable -sandbox if CONFIG_SECCOMP undefined	2018-05-31 19:12:13 +02:00
sev.h	kvm: introduce memory encryption APIs	2018-03-13 12:04:03 +01:00
sysemu.h	vl.c: new function serial_max_hds()	2018-04-26 13:58:29 +01:00
tpm_backend.h	Drop superfluous includes of qapi-types.h and test-qapi-types.h	2018-02-09 05:05:11 +01:00
tpm.h	Include less of the generated modular QAPI headers	2018-03-02 13:45:50 -06:00
watchdog.h	Include less of the generated modular QAPI headers	2018-03-02 13:45:50 -06:00
whpx.h	Add the WHPX vcpu API	2018-02-07 14:09:26 +01:00
xen-mapcache.h	xen/mapcache: introduce xen_replace_cache_entry()	2017-07-18 14:16:09 -07:00