[libvirt] [PATCH 2/5] qemu: cgroup: Expose /dev/sev/ only to domains that require SEV

[Daniel P. Berrangé]

On Thu, Jan 31, 2019 at 04:26:15PM +0100, Erik Skultety wrote:
> SEV has a limit on number of concurrent guests. From security POV we
> should only expose resources (any resources for that matter) to domains
> that truly need them.
> 
> Signed-off-by: Erik Skultety <eskultet at redhat.com>
> ---
>  src/qemu/qemu_cgroup.c | 19 +++++++++++++++++++
>  1 file changed, 19 insertions(+)

Reviewed-by: Daniel P. Berrangé <berrange at redhat.com>


Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|