Re: [Qemu-devel] syscall filtering

[Paul Brook]

On Tuesday 23 November 2004 14:19, Magnus Damm wrote:
> Hello,
>
> While Piotrek is thinking about securing the system emulator, I am more
> interested in syscall filtering. I have not thought about it too much,
> but the idea (if possible) would be to run qemu as a filter for certain
> binaries on your machine. Basically, you run i386-user with filters on a
> i386 machine.

You would also need to add memory access protection. With the current user 
emulation it is possible for the emulated appliction to directly modify the 
emulator state.

Paul