[libvirt-users] Libvirt access control drivers

Anastasiya Ruzhanskaya anastasiya.ruzhanskaya at frtk.ru
Wed May 9 08:50:33 UTC 2018


Here https://libvirt.org/acl.html is stated that you designed this access
control system as pluggable. Are there any options ( even with modifying
libvirt code) to plug in any custom driver?
I just need to take a try and design something that will support remote
access control.
I am not sure if sVirt is the right thing I should look at.

2018-05-09 11:27 GMT+03:00 Daniel P. Berrangé <berrange at redhat.com>:

> On Wed, May 09, 2018 at 11:21:22AM +0300, Anastasiya Ruzhanskaya wrote:
> > Ok, excuse me for misunderstanding, how it is possible then to set up
> > access control when I use remote connection to KVM ( not in UNIX domain)?
> > Is there any way within libvirt, maybe based on authentication or
> > certificates?
>
> Unfortunately we don't have a solution for fine grained access control
> when using remote TCP access. We had a feature request against polkit
> to allow passing it identity information such as certificate distinguished
> name, but that was rejected :-(
>
> Regards,
> Daniel
> --
> |: https://berrange.com      -o-    https://www.flickr.com/photos/
> dberrange :|
> |: https://libvirt.org         -o-
> https://fstop138.berrange.com :|
> |: https://entangle-photo.org    -o-    https://www.instagram.com/
> dberrange :|
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvirt-users/attachments/20180509/93642a1c/attachment.htm>


More information about the libvirt-users mailing list