mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2025-03-07 17:28:15 +00:00
qemu: conf: simplify seccomp_sandbox comment
It contains too many negations and conditions that are no longer relevant now that we only support QEMU >= 2.11. Signed-off-by: Ján Tomko <jtomko@redhat.com> Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
This commit is contained in:
parent
142938f5c2
commit
d1be5aa6a4
@ -769,13 +769,12 @@
|
|||||||
|
|
||||||
|
|
||||||
|
|
||||||
# Use seccomp syscall sandbox in QEMU.
|
# Use seccomp syscall filtering sandbox in QEMU.
|
||||||
# 1 == seccomp enabled, 0 == seccomp disabled
|
# 1 == filter enabled, 0 == filter disabled
|
||||||
#
|
#
|
||||||
# If it is unset (or -1), then seccomp will be enabled
|
# Unless this option is disabled, QEMU will be run with
|
||||||
# only if QEMU >= 2.11.0 is detected, otherwise it is
|
# a seccomp filter that stops it from executing certain
|
||||||
# left disabled. This ensures the default config gets
|
# syscalls.
|
||||||
# protection for new QEMU using the blacklist approach.
|
|
||||||
#
|
#
|
||||||
#seccomp_sandbox = 1
|
#seccomp_sandbox = 1
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user