Control: severity -1 wishlist On 22.10.2012 08:46, gustavo panizzo <gfa> wrote: > Package: qemu > Version: 1.1.2+dfsg-2 > Severity: normal > > in package qemu(-system,-kvm,-user) the bridge helper is not installed. > that helper is very useful to run qemu as non-root and use brige > networking
This is a known issue, and is more or less intentional. The reason is that at least one Debian package maintainer (me) disagrees with the upstream about this very bridge helper. This is a setuid-root binary (or binary with additional capabilities) which has, well, unknown implications. For example, initially the helper always created interfaces in the form tapNN (picking up next free number). This way, it weren't possible to know which iface will be in use by which guest, and hence, for example, firewall rules can't be created for this iface by system administrator. Recently upstream added ability to specify interface name from command line, but now it accepts any interface, including ones which are used by the system - eg, pppNN, for which firewall rules already created. At least, it shuold gain ability to specify which ifaces (either list or a pattern) can be used by which user/group, and only after that I'll consider adding it to Debian. Upstream appears to be not interested. For now it is a security treat. Lowering the severity of this bugreport to wishlist, since it is definitely what it is :) Thank you for the report! /mjt -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
