Re: [libvirt] Can jobs suck like qemu-pr-helper does be transfered to libvirtd?

>>This does not play well with the fact that processes as the PR helper >>are always required. >> >>Merging them into libvirtd would make the VM stop until libvirtd is >>running again. Additionally if any of the operations require persistent >>kernel state as e.g. file descriptors, this would be impossible as >>stopping libvirtd process would close the FDs which may be then >>impossible to reopen properly e.g. due to state. > >Thanks! Besides these reasons above, will it weaken security if we let libvirtd do >these jobs? For example, >Such sayings, like "libvirtd would become the focus from attacking forces", make >sense? If there's no security concern, then, will it be OK to add a new KVM ioctl, which allows qemu to ask kvm module to do the high prilidged jobs?