Package: qemu-kvm Version: 0.14.1+dfsg-1 Severity: wishlist Using KVM with tap-based network interfaces, I need to set the cap_net_admin capability on the kvm binary because I want to start VMs as a normal user. However, on every package upgrade, the binary files are overwritten and the capabilities are lost.
Is there any possibility of having such capabilities preserved on upgrade? ladmin@golem:~$ sudo getcap -v `which kvm` /usr/bin/kvm = cap_net_admin+ep ladmin@golem:~$ sudo aptitude reinstall qemu-kvm The following packages will be REINSTALLED: qemu-kvm [..] ladmin@golem:~$ sudo getcap -v `which kvm` /usr/bin/kvm ladmin@golem:~$ sudo setcap cap_net_admin=ep `which kvm` ladmin@golem:~$ sudo getcap -v `which kvm` /usr/bin/kvm = cap_net_admin+ep -- Package-specific info: /proc/cpuinfo: processor : 0 vendor_id : GenuineIntel cpu family : 15 model : 6 model name : Intel(R) Pentium(R) D CPU 3.00GHz stepping : 2 cpu MHz : 3000.507 cache size : 2048 KB physical id : 0 siblings : 2 core id : 0 cpu cores : 2 apicid : 0 initial apicid : 0 fpu : yes fpu_exception : yes cpuid level : 6 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc pebs bts nopl pni dtes64 monitor ds_cpl vmx cid cx16 xtpr pdcm lahf_lm tpr_shadow bogomips : 6001.01 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: processor : 1 vendor_id : GenuineIntel cpu family : 15 model : 6 model name : Intel(R) Pentium(R) D CPU 3.00GHz stepping : 2 cpu MHz : 3000.507 cache size : 2048 KB physical id : 0 siblings : 2 core id : 1 cpu cores : 2 apicid : 1 initial apicid : 1 fpu : yes fpu_exception : yes cpuid level : 6 wp : yes flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm constant_tsc pebs bts nopl pni dtes64 monitor ds_cpl vmx cid cx16 xtpr pdcm lahf_lm tpr_shadow bogomips : 6001.03 clflush size : 64 cache_alignment : 128 address sizes : 36 bits physical, 48 bits virtual power management: -- System Information: Debian Release: wheezy/sid APT prefers testing APT policy: (990, 'testing'), (900, 'stable'), (300, 'unstable') Architecture: i386 (x86_64) Kernel: Linux 2.6.38-2-amd64 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages qemu-kvm depends on: ii adduser 3.112+nmu2 add and remove users and groups ii etherboot-qemu 5.4.4-9 Bootstrapping for various network ii libaio1 0.3.109-1 Linux kernel AIO access library - ii libasound2 1.0.23-4 shared library for ALSA applicatio ii libattr1 1:2.4.44-3 Extended attribute shared library ii libbluetooth3 4.91-1 Library to use the BlueZ Linux Blu ii libbrlapi0.5 4.2-7 braille display access via BRLTTY ii libc6 2.13-4 Embedded GNU C Library: Shared lib ii libcurl3-gnutls 7.21.6-1 Multi-protocol file transfer libra ii libgnutls26 2.10.5-1+b1 the GNU TLS library - runtime libr ii libjpeg62 6b1-1 The Independent JPEG Group's JPEG ii libncurses5 5.9-1 shared libraries for terminal hand ii libpng12-0 1.2.44-2 PNG library - runtime ii libpulse0 0.9.21-4 PulseAudio client libraries ii libsasl2-2 2.1.23.dfsg1-8 Cyrus SASL - authentication abstra ii libsdl1.2debian 1.2.14-6.4 Simple DirectMedia Layer ii libuuid1 2.17.2-9.1 Universally Unique ID library ii libvdeplug2 2.2.3-3+b1 Virtual Distributed Ethernet - Plu ii libx11-6 2:1.4.3-1 X11 client-side library ii python 2.6.6-14 interactive high-level object-orie ii qemu-keymaps 0.14.0+dfsg-5.1 QEMU keyboard maps ii qemu-utils 0.14.0+dfsg-5.1 QEMU utilities ii seabios 0.6.1.2-3 Legacy BIOS implementation ii vgabios 0.6c-3 VGA BIOS software for the Bochs an ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime Versions of packages qemu-kvm recommends: ii bridge-utils 1.5-2 Utilities for configuring the Linu ii iproute 20110315-1 networking and traffic control too Versions of packages qemu-kvm suggests: pn debootstrap <none> (no description available) pn samba <none> (no description available) ii vde2 2.2.3-3+b1 Virtual Distributed Ethernet -- no debconf information -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

