qemu: Replace --blacklist with --block-rpcs in guest agent

QEMU 9.1 removed the deprecated --blacklist CLI option from qemu-ga,
replacing it with --block-rpcs. The systemd service file still used the
old flag, causing qemu-guest-agent to fail to start.

Update qemu-guest-agent.service and qemu-ga.sysconfig to use --block-rpcs
and rename the BLACKLIST_RPC environment variable to BLOCK_RPCS.

Fixes: #15843

Author: Travisivart

SPECS/qemu/qemu-ga.sysconfig

@@ -1,11 +1,11 @@
 # This is a systemd environment file, not a shell script.
 # It provides settings for "/lib/systemd/system/qemu-guest-agent.service".
 
-# Comma-separated blacklist of RPCs to disable, or empty list to enable all.
+# Comma-separated list of RPCs to disable, or empty list to enable all.
 #
-# You can get the list of RPC commands using "qemu-ga --blacklist='?'".
-# There should be no spaces between commas and commands in the blacklist.
-#BLACKLIST_RPC=guest-file-open,guest-file-close,guest-file-read,guest-file-write,guest-file-seek,guest-file-flush,guest-exec,guest-exec-status
+# You can get the list of RPC commands using "qemu-ga --block-rpcs=help".
+# There should be no spaces between commas and commands in the list.
+#BLOCK_RPCS=guest-file-open,guest-file-close,guest-file-read,guest-file-write,guest-file-seek,guest-file-flush,guest-exec,guest-exec-status
 
 # Fsfreeze hook script specification.
 #

SPECS/qemu/qemu-guest-agent.service

@@ -10,7 +10,7 @@ EnvironmentFile=/etc/sysconfig/qemu-ga
 ExecStart=/usr/bin/qemu-ga \
   --method=virtio-serial \
   --path=/dev/virtio-ports/org.qemu.guest_agent.0 \
-  --blacklist=${BLACKLIST_RPC} \
+  --block-rpcs=${BLOCK_RPCS} \
   -F${FSFREEZE_HOOK_PATHNAME}
 Restart=always
 RestartSec=0

SPECS/qemu/qemu.signatures.json

@@ -7,8 +7,8 @@
     "kvm-s390x.conf": "09aee1f49c96e77c65858daf20f1095eb6bef3267470c9d8f82a22ff164c96cd",
     "kvm-x86.conf": "9ab7f0565e6af908350387b83ee95755250ee2e6822af787c1c2e5e9388ddcd5",
     "kvm.conf": "3800c042f5411c6ca4f7578ab36f157212d88804090cdb033906841bfae58396",
-    "qemu-ga.sysconfig": "d0c126093fb7bd26d255bd7b692ac59f0559394b7feef792651e6208127fd1ee",
-    "qemu-guest-agent.service": "7eb1547eeae0887bd58680e0c41a6f7bfe47babd356a98b91b4d39a5ade31501",
+    "qemu-ga.sysconfig": "bd1cdb44c121a1285995c939a411b63283792c66fbd623be2497d08d9b840ad9",
+    "qemu-guest-agent.service": "ac9e9eb8981bcf841e1b6341e4d470c1d1dba396a16f6221840cb358b974d815",
     "vhost.conf": "a523b6e2082ab5b913c9541295424ce7f3ff7f8161e6f21c7a8f64d23dd22313",
     "qemu-9.1.0.tar.xz": "816b7022a8ba7c2ac30e2e0cf973e826f6bcc8505339603212c5ede8e94d7834"
   }

SPECS/qemu/qemu.spec

@@ -435,7 +435,7 @@ Obsoletes: sgabios-bin <= 1:0.20180715git-10.fc38
 Summary: QEMU is a FAST! processor emulator
 Name: qemu
 Version: 9.1.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND FSFAP AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later AND GPL-2.0-or-later WITH GCC-exception-2.0 AND LGPL-2.0-only AND LGPL-2.0-or-later AND LGPL-2.1-only AND LGPL-2.1-or-later AND MIT AND LicenseRef-Fedora-Public-Domain AND CC-BY-3.0
 URL: http://www.qemu.org/
 
@@ -3409,6 +3409,11 @@ useradd -r -u 107 -g qemu -G kvm -d / -s /sbin/nologin \
 
 
 %changelog
+* Tue Mar 24 2026 Azure Linux Team <azurelinux@microsoft.com> - 9.1.0-3
+- Replace deprecated --blacklist with --block-rpcs in qemu-guest-agent
+  service file and sysconfig to fix startup failure (--blacklist was
+  removed in QEMU 9.1)
+
 * Wed Mar 11 2026 Azure Linux Security Servicing Account <azurelinux-security@microsoft.com> - 9.1.0-2
 - Patch for CVE-2025-14876, CVE-2024-8354