Re: [libvirt] [PATCHv3 3/2] qemu: don't request cgroup ACL access for /dev/net/tun

On 03/09/2011 05:12 PM, Eric Blake wrote: > Since libvirt always passes /dev/net/tun to qemu via fd, we should > never trigger the cases where qemu tries to directly open the > device. Therefore, it is safer to deny the cgroup device ACL. > > * src/qemu/qemu_cgroup.c (defaultDeviceACL): Remove /dev/net/tun. > * src/qemu/qemu.conf (cgroup_device_acl): Reflect this change.

> - "/dev/rtc", "/dev/hpet", "/dev/net/tun", > + "/dev/rtc", "/dev/hpet", > NULL, > }; > #define DEVICE_PTY_MAJOR 136 ACK.