[libvirt] [PATCH 1/6] unpriv_sgio: Add docs and rng schema for new XML unpriv_sgio

Paolo Bonzini pbonzini at redhat.com
Tue Nov 27 09:16:17 UTC 2012


Il 27/11/2012 08:08, Osier Yang ha scritto:
> 
>>
>> - filter-scsi-commands=yes/no
>>
>> - cdb-filter=yes/no
>>
>> - privileged-scsi-commands=allow/deny
>>
>> - cdb=allow-all/filter
> 
> As far as I get from your kernel patches, the unpriv_sgio
> allows any SG_IO commands for unprivileged users, without
> filtering.
> 
> So I'm wondering if using the term "CBD filter" matches
> the exact meaning.

The question is: "will the guest be subject to filtering of some CDBs?"
It's an implementation detail that the kernel does that rather than QEMU...

Paolo




More information about the libvir-list mailing list