[libvirt] Accessing VM by only specigied users.
Hi All, I want to access vm via noon-root user. To explain my scenario : Suppose I have following VM VM1,VM2,VM3,VM4 I want User1 access VM1 only User2 access VM2 only User3 access VM3 only User4 access VM4 only By access I mean that he should be able to start and console on Vm. Moreover only he can list the vm by Virsh list command Is that possible, like in VMware? Regards Pankaj Rawat DISCLAIMER: ----------------------------------------------------------------------------------------------------------------------- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. It shall not attach any liability on the originator or NECHCL or its affiliates. Any views or opinions presented in this email are solely those of the author and may not necessarily reflect the opinions of NECHCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of the author of this e-mail is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. . -----------------------------------------------------------------------------------------------------------------------
On 06/27/2012 04:35 AM, Pankaj Rawat wrote:
Hi All,
I want to access vm via noon-root user.
To explain my scenario : Suppose I have following VM VM1,VM2,VM3,VM4
I want User1 access VM1 only User2 access VM2 only User3 access VM3 only User4 access VM4 only
As long as exactly one user ever needs to access a given VM, then we have a solution: use qemu:///session (although getting networking to work with qemu:///session is interesting). But if you want more than one user to interact with a VM while still limiting things according to uid, then you'll have to wait for Daniel Berrange's patch series adding fine-grained access control to be incorporated; it's still a work in progress probably several months away from general availability.
The contents of this e-mail and any attachment(s) are confidential and
This disclaimer is unenforceable on an publicly-archived list. Please consider using a personal account instead of your employer's account to avoid spamming the list with poor netiquette legalese. -- Eric Blake eblake@redhat.com +1-919-301-3266 Libvirt virtualization library http://libvirt.org
participants (2)
-
Eric Blake -
Pankaj Rawat