[Fedora-xen] allow non-root user to stop/start xen host

[Adrian Chadd]

On Fri, Dec 08, 2006, Daniel P. Berrange wrote:
> On Fri, Dec 08, 2006 at 02:29:38PM -0500, Gary Siao wrote:
> > hi gurus
> > 
> > i am a newbie to XEN and would like to know if there's a way to allow
> > non-root user to use the XM command to stop and start XEN VM hosts.
> 
> No standard tools allow this[1]. Letting non-root users stop/start guests is 
> a potential security hole, because the back-end drivers for the guest access 
> many privileged files / system resources in Dom0.

You could also use sudo. xm is just 'another command' (with, as Daniel said,
all the potential security issues.)


Adrian