Re: [PATCH v3] qemu: Drop /dev/kvm from default device ACL

On 10/22/25 17:54, Praveen K Paladugu wrote:

From: Praveen K Paladugu <prapal@linux.microsoft.com>

A domain that runs with TCG emulation does not need kvm device, so drop it from default device ACL.

Dynamically grant access to /dev/kvm based on domain type.

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com> --- src/qemu/qemu.conf.in | 3 +-- src/qemu/qemu_cgroup.c | 10 ++++++++-- src/qemu/qemu_domain.h | 1 + src/qemu/qemu_namespace.c | 9 +++++++-- src/qemu/test_libvirtd_qemu.aug.in | 3 +-- 5 files changed, 18 insertions(+), 8 deletions(-)

Reviewed-by: Michal Privoznik <mprivozn@redhat.com> and merged. Michal