FS#48703 - [qemu] sandbox/seccomp option hangs

Attached to Project: Arch Linux
Opened by Plague (centuryplague) - Saturday, 26 March 2016, 17:44 GMT
Last edited by David Runge (dvzrv) - Monday, 21 February 2022, 20:52 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Tobias Powalowski (tpowa)
Anatol Pomozov (anatolik)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:
On qemu 2.5.0-1, "-sandbox on" causes immediate full freeze, no debug logs appear with -d and -D except a prologue.

A default settings call starts a VM window just fine:
qemu-system-x86_64
same as
qemu-system-x86_64 -sandbox off

This call locks up immediately:
qemu-system-x86_64 -sandbox on

Note this is on linux-grsec kernel.

Started occurring probably a month or two ago and just disabled seccomp because too much on my plate.

Steps to reproduce:
qemu-system-x86_64 -sandbox on
This task depends upon

Closed by  David Runge (dvzrv)
Monday, 21 February 2022, 20:52 GMT
Reason for closing:  Won't fix
Additional comments about closing:  linux-grsec is not a supported kernel
Comment by Plague (centuryplague) - Saturday, 26 March 2016, 17:47 GMT
* This is on a 64-bit host
Comment by Stuart Cardall (itoffshore) - Wednesday, 05 February 2020, 21:34 GMT
qemu 4.2.0-1 with

seccomp_sandbox = 1

& the qemu user / group running as a $USER on linux-hardened works ok with Windows 10 guest

Loading...