From: Erik Skultety <eskultet@redhat.com>
Date: Fri, 1 Feb 2019 12:05:56 +0000 (+0100)
Subject: docs: news: Update the release notes with the SEV permission fix
X-Git-Tag: v5.1.0-rc1~277
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f2b4039194fb7e719856bbe36cfff72bd6c3c237;p=thirdparty%2Flibvirt.git

docs: news: Update the release notes with the SEV permission fix

Signed-off-by: Erik Skultety <eskultet@redhat.com>
Reviewed-by: Andrea Bolognani <abologna@redhat.com>
---

diff --git a/docs/news.xml b/docs/news.xml
index 55d6a3926b..bea8ff29d2 100644
--- a/docs/news.xml
+++ b/docs/news.xml
@@ -50,6 +50,18 @@
     <section title="Improvements">
     </section>
     <section title="Bug fixes">
+      <change>
+        <summary>
+          qemu: Use CAP_DAC_OVERRIDE during QEMU capabilities probing
+        </summary>
+        <description>
+          By default, libvirt runs the QEMU process as <code>qemu:qemu</code>
+          which could cause issues during probing as some features like AMD SEV
+          might be inaccesible to QEMU because of file system permissions.
+          Therefore, <code>CAP_DAC_OVERRIDE</code> is granted to overcome these
+          for the purposes of probing.
+        </description>
+      </change>
       <change>
         <summary>
           storage: Add default mount options for fs/netfs storage pools