Comment # 9 on bug 1142268 from James Fehlig

(In reply to Klaus Mueller from comment #8)
> <qemu:commandline>
>   <qemu:arg value='-sandbox'/>
>   <qemu:arg
> value='on,obsolete=deny,elevateprivileges=deny,spawn=deny,
> resourcecontrol=allow'/>
> </qemu:commandline>
> 
> doesn't take any effect because the automatically generated -sandbox option
> is putted after the one generated manually. This should be vice versa!

Is the '-sandbox' option added even when 'seccomp_sandbox = 0' in
/etc/libvirt/qemu.conf?