Re: [libvirt] RFC: stop clearing QEMU emulator capabilities

On 11/28/19 2:04 PM, Daniel P. Berrangé wrote: I don't recall the exact details, but I remember I had to disable clearing capabilities temporarily (I vaguely recall it had something to do with device assignment). What I am trying to say is that clearing capabilities may sometimes get in our way. So I agree with not clearing them and relying on the rest of security mechanisms we have. Michal