[libvirt] [PATCH 1/3] qemu: conf: Remove /dev/sev from the default cgroup device acl list

Michal Privoznik mprivozn at redhat.com
Tue Jan 29 12:26:47 UTC 2019


On 1/23/19 1:57 PM, Erik Skultety wrote:
> We should not give domains access to something they don't necessarily
> need by default.
> 
> Signed-off-by: Erik Skultety <eskultet at redhat.com>
> ---
>   src/qemu/qemu.conf                 | 2 +-
>   src/qemu/qemu_cgroup.c             | 2 +-
>   src/qemu/test_libvirtd_qemu.aug.in | 1 -
>   3 files changed, 2 insertions(+), 3 deletions(-)

ACK if you remove it from docs/drvqemu.html.in too. BTW: /dev/net/tun 
should be removed from there as well.

Michal




More information about the libvir-list mailing list