Re: [libvirt] [PATCH] docs: news: Update the release notes with the SEV permission fix
On Fri, 2019-02-01 at 13:07 +0100, Erik Skultety wrote:
[...]
+ By default, libvirt runs the QEMU process as qemu:qemu
which could
+ cause issues during probing as some features (like AMD SEV) might be
+ inaccesible to QEMU because of file system permissions. Therefore,
+ CAP_DAC_OVERRIDE is granted to overcome these for the purposes of
+ probing.
You can wrap 'qemu:qemu' and 'CAP_DAC_OVERRIDE' in <code> elements
so that they will look nicer in the HTML version.
I'd also change ' (like AMD SEV)' to ', like AMD SEV,', but feel
free to leave it alone if you like it better that way.
Reviewed-by: Andrea Bolognani <abologna(a)redhat.com>
--
Andrea Bolognani / Red Hat / Virtualization