[libvirt] Question about more finer access control permission on libvirt

Atsushi SAKAI sakaia at jp.fujitsu.com
Fri May 9 00:49:19 UTC 2008


Hi, Dan

I have a question of libvirt with Polkit.
Currently, the libvirt w/ Polkit has 2 access control permissions.
(Read Only and Read Write)

Have you planned to expand the access control more finer?
In my use case, Policy should define by domain, operation, operator.
Of course, operator is already considered on current libvirt w/ Polkit.
So at this point, it needs to add domain and operation policy.

The use case is for many(about 100 or more) domain operation.

I just want to know 
how to minimize granting access control permission of each user
on libvirt in future.

Any comment appreciated.

Thanks
Atsushi SAKAI







More information about the libvir-list mailing list