[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH 1/3] qemu: conf: Remove /dev/sev from the default cgroup device acl list



On 1/23/19 1:57 PM, Erik Skultety wrote:
We should not give domains access to something they don't necessarily
need by default.

Signed-off-by: Erik Skultety <eskultet redhat com>
---
  src/qemu/qemu.conf                 | 2 +-
  src/qemu/qemu_cgroup.c             | 2 +-
  src/qemu/test_libvirtd_qemu.aug.in | 1 -
  3 files changed, 2 insertions(+), 3 deletions(-)

ACK if you remove it from docs/drvqemu.html.in too. BTW: /dev/net/tun should be removed from there as well.

Michal


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]