[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] how to control usb read write perm



On 04/25/2013 11:15 AM, yue wrote:
hi,all 
i have 2 questions. both is related to spice usb redirect.
1. if i can control RW perm of  usb device  which is producted via spice ? in order to control user's rw operation in guestVM .

       AFAIK currently, there is no such control on Read and Write permission.
       But you can use the following redirection filter to limit usb devices
       <usbdev> is a whitelist of filter policies.
     <redirfilter>
       <usbdev class='0x08' vendor='0x1234' product='0xbeef' version='2.00' allow='yes'/>
       <usbdev allow='no'/>
     </redirfilter>


 2.if user have several usbs, and plug them at the same time when using spice client.  if i can control which usb(s) can be accessed by user in  guestVM?
 

      The virtual machine need to add one or more USB redirection channels<redirdev> first in to domain XML,
      and these filter policies apply to them globally. For example:

      <devices>
        ...   
        <redirdev bus='usb' type='spicevmc'>
          <address type='usb' bus='0' port='2'/>
        </redirdev>
        <redirfilter>
          <usbdev vendor='0x1234' product='0xbeef' allow='yes'/>
        </redirfilter>
        ...
      </devices>

      About details see :http://www.libvirt.org/formatdomain.html#elementsRedir

      Guannan


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]