Re: [Xen-devel] [PATCH v5] run QEMU as non-root

2015-07-01 Thread Jim Fehlig
On 07/01/2015 02:23 AM, Fabio Fantoni wrote: Il 01/07/2015 02:04, Jim Fehlig ha scritto: On 06/30/2015 07:55 AM, Stefano Stabellini wrote: Try to use "xen-qemudepriv-domid$domid" first, then "xen-qemudepriv-shared" and root if everything else fails. The uids need to be manually created by the

Re: [Xen-devel] [PATCH v5] run QEMU as non-root

2015-07-01 Thread Jim Fehlig
On 07/01/2015 04:42 AM, Stefano Stabellini wrote: On Tue, 30 Jun 2015, Jim Fehlig wrote: On 06/30/2015 07:55 AM, Stefano Stabellini wrote: [...] b/docs/misc/qemu-deprivilege.txt new file mode 100644 index 000..783874b --- /dev/null +++ b/docs/misc/qemu-deprivilege.txt @@ -0,0 +1,26 @@ +For

Re: [Xen-devel] [PATCH v5] run QEMU as non-root

2015-07-01 Thread Stefano Stabellini
On Tue, 30 Jun 2015, Jim Fehlig wrote: > On 06/30/2015 07:55 AM, Stefano Stabellini wrote: > > Try to use "xen-qemudepriv-domid$domid" first, then > > "xen-qemudepriv-shared" and root if everything else fails. > > > > The uids need to be manually created by the user or, more likely, by the > > xen

Re: [Xen-devel] [PATCH v5] run QEMU as non-root

2015-07-01 Thread Fabio Fantoni
Il 01/07/2015 02:04, Jim Fehlig ha scritto: On 06/30/2015 07:55 AM, Stefano Stabellini wrote: Try to use "xen-qemudepriv-domid$domid" first, then "xen-qemudepriv-shared" and root if everything else fails. The uids need to be manually created by the user or, more likely, by the xen package maint

Re: [Xen-devel] [PATCH v5] run QEMU as non-root

2015-06-30 Thread Jim Fehlig
On 06/30/2015 07:55 AM, Stefano Stabellini wrote: Try to use "xen-qemudepriv-domid$domid" first, then "xen-qemudepriv-shared" and root if everything else fails. The uids need to be manually created by the user or, more likely, by the xen package maintainer. To actually secure QEMU when running