/dev/kvm permissions

DISCUSSION Baruch Even 2 participants 3 messages Jun 17, 2007 2 messages not in the archive KVM

lore

Share & tools

lore

Baruch Even

author

2007-06-17 18:44 UTC #0 lore raw

Hello,

What do peoples do/think about the permissions for /dev/kvm?

I'm the maintainer for the Debian package and currently the package uses a group to control access, for no good reason really. I've seen that kqemu in Debian simply uses 0666 permissions and consider doing the same for kvm. I wanted to know what others do in other distributions and what others think the permissions should be.

Thanks,
Baruch

p.s. Please cc me as I'm not subscribed to kvm-devel. Thanks.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

A message that is not in the archive (sent off-list or not yet received): [email protected]

Avi Kivity

2007-06-17 18:52 UTC #2 lore raw

Quoted 11 lines · Baruch Even

Hello,
What do peoples do/think about the permissions for /dev/kvm?
I'm the maintainer for the Debian package and currently the package uses a group to control access, for no good reason really. I've seen that kqemu in Debian simply uses 0666 permissions and consider doing the same for kvm. I wanted to know what others do in other distributions and what others think the permissions should be.

I recommend 0660, and setting /dev/kvm's group to 'kvm'. Users which need access to kvm can be added to that group.

A udev rule which does this is available in the scripts/ directory in kvm-userspace.git (not sure if it is packaged).

When kvm stops locking so much memory, I guess this can be relaxed.

Signature · 8 lines

Do not meddle in the internals of kernels, for they are subtle and quick to panic.


-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/

A message that is not in the archive (sent off-list or not yet received): 4675830B.3020404-atKUWr5tajBWk0Htik3J/[email protected]

Baruch Even

author

2007-06-17 19:17 UTC #4 lore raw

Quoted 13 lines · Avi Kivity

Quoted 11 lines · Baruch Even
Hello,
What do peoples do/think about the permissions for /dev/kvm?
I'm the maintainer for the Debian package and currently the package uses a group to control access, for no good reason really. I've seen that kqemu in Debian simply uses 0666 permissions and consider doing the same for kvm. I wanted to know what others do in other distributions and what others think the permissions should be.

Quoted 2 lines

I recommend 0660, and setting /dev/kvm's group to 'kvm'. Users which need access to kvm can be added to that group.

OK. This is what happens right now.

Quoted 1 line

When kvm stops locking so much memory, I guess this can be relaxed.

OK. It would be nice if you notify when you think this change is a good idea. Relaxing access will make kvm easier to use which is always a good thing.

Baruch