On 11/07/2009 11:14 AM, Avi Kivity wrote:
I'd welcome -net bridge as one of them. But we shouldn't try to invent access control systems or install suid helpers.
We can make the helper a script that does exec sudo /the/real/helper "$@"so a user can add it to /etc/sudoers and get pre-authenticated configuration.
-- Do not meddle in the internals of kernels, for they are subtle and quick to panic.
