Re: [libvirt] [PATCH RFC 0/4] Expose Expose IOMMU and VFIO host capabilities
On Thu, Jun 26, 2014 at 12:18:24PM +0200, Michal Privoznik wrote:
*** NOT FOR UPSTREAM MERGE ***
This is pure RFC, that's why it contains just code without any documentation,
RNG schemas, tests, ..., with sparse commit messages. I just want to make sure
I'm on the right track this time.
BTW: The ACL issue on the command is still not resolved and honestly, I've no
solution. Long story short, with this API I'm introducing users with RO
connection can execute arbitrary files on the host. Isn't that just nice?
Yes, that's the same scenario as the XMLToNative / NativeToXML APIs. In
that case we set connect:write as the permission and I think that's
probably reasonable here too.
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|