[libvirt-users] auto-set /cgroup/*/libvirt/qemu/<vm name>/ directory permissions on creation

Daniel P. Berrange berrange at redhat.com
Wed Nov 2 09:59:31 UTC 2011


On Tue, Nov 01, 2011 at 05:27:24PM -0400, Ben Clay wrote:
> Is there a way to automatically set the permissions of cgroups directories
> created by libvirt when a VM is launched?  
> 
>  
> 
> Although it looks like I can set permissions on top-level /cgroup
> directories via cgconfig.conf, the cgconfig.conf manpage says "Permissions
> are related only to enclosing control group and are not inherited by
> subgroups.".  From this, I believe that when libvirt creates VMs, the new
> directories under /cgroup/*/libvirt/qemu/<vm name>/ will not receive the
> cgconfig.conf permissions.
> 
>  
> 
> Where in the libvirt config can I set this?  We need users other than root
> to write to specific subsystems.

We don't support setting alternate permissions, because the intention is
that all access is via libvirt APIs, which allow unprivileged users as
defined by the libvirt access control policy.

Daniel
-- 
|: http://berrange.com      -o-    http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org              -o-             http://virt-manager.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org       -o-       http://live.gnome.org/gtk-vnc :|




More information about the libvirt-users mailing list