[libvirt] Can we allow users in 'qemu' group to skip polkit auth?

Cole Robinson crobinso at redhat.com
Tue Jun 11 21:11:12 UTC 2013


There's a bug report filed against Fedora libvirt requesting a polkit rule be
installed that grants read/write libvirt access to all users in the 'qemu' group:

https://bugzilla.redhat.com/show_bug.cgi?id=957300

I'm inclined to agree with the reporter, and time has shown that many users
install custom polkit rules to grant their user passwordless access to libvirt
so this would definitely fill a need.

I'm sure there's plenty to consider here since we are talking about security.
Thoughts?

Thanks,
Cole




More information about the libvir-list mailing list