Re: [libvirt] [PATCH v3 0/5] RFC: grant KVM guests retain arbitrary capabilities

On 01/18/2012 12:38 AM, Taku Izumi wrote: >> I am now wondering if we should do this in a different way. ie if >> there is some XML configuration parameter for the <disk> that >> indicates the need for rawio, then libvirt could automatically >> ensures that we add CAP_SYS_RAWIO when starting QEMU. > > I see. > You say if a guest has the following XML configuration, > "CAP_SYS_RAWIO" capability is automatically added to it, right? > > <disk type='block' device='lun'> Yes, that actually seems reasonable, especially since device='lun' is brand new, and so far, is really the only reason that we'd need CAP_SYS_RAWIO.