To verify my suspicion of a qemu bug: Leap 15.1 # qemu-system-x86_64 -display sdl -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny Bad system call (core dumped) # qemu-system-x86_64 -display sdl -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=allow works fine Tumbleweed # qemu-system-x86_64 -display sdl -sandbox on,obsolete=deny,elevateprivileges=deny,spawn=deny,resourcecontrol=deny works fine