Re: Prevent the firewall from being compromised through libvirtd

2020-01-27 Thread Daniel P . Berrangé
On Sat, Jan 25, 2020 at 04:52:40PM +0100, Thomas Luening wrote: > Hello @ all > > The libvirt-daemon compromises the packet-filtering-rules at daemon-startup, > before any VM is started. To prevent this, I first have create a hook-script > which deletes existing rules, but apparently these rules a

Prevent the firewall from being compromised through libvirtd

2020-01-25 Thread Thomas Luening
Hello @ all The libvirt-daemon compromises the packet-filtering-rules at daemon-startup, before any VM is started. To prevent this, I first have create a hook-script which deletes existing rules, but apparently these rules are set after the hook. Removing the defined networks was no solution ei