]> git.ipfire.org Git - thirdparty/libvirt.git/commit
qemu: Drop /dev/kvm from default device ACL
authorPraveen K Paladugu <prapal@linux.microsoft.com>
Wed, 22 Oct 2025 15:54:37 +0000 (10:54 -0500)
committerMichal Privoznik <mprivozn@redhat.com>
Thu, 23 Oct 2025 07:50:32 +0000 (09:50 +0200)
commitd8d35958516e5fcdfe8dfe97321148dfb5b41ef6
tree54893aa4121c0112bb2f63b51110d6b46058c218
parentf3f8408975154b914ebba0fa299f9c89dfa0f5e5
qemu: Drop /dev/kvm from default device ACL

A domain that runs with TCG emulation does not need kvm device, so drop
it from default device ACL.

Dynamically grant access to /dev/kvm based on domain type.

Signed-off-by: Praveen K Paladugu <prapal@linux.microsoft.com>
Signed-off-by: Michal Privoznik <mprivozn@redhat.com>
Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
src/qemu/qemu.conf.in
src/qemu/qemu_cgroup.c
src/qemu/qemu_domain.h
src/qemu/qemu_namespace.c
src/qemu/test_libvirtd_qemu.aug.in