David Woodhouse wrote:
On Tue, 2009-11-03 at 18:28 -0600, Anthony Liguori wrote:
The most common use of -net tap is to connect a tap device to a bridge. This
requires the use of a script and running qemu as root in order to allocate a
tap device to pass to the script.
Does it?
Tap devices can be created (and configured) in advance, and can be
chowned so that they can be opened by an otherwise unprivileged user (or
group).
But that requires prior administrative access.
You don't need root privileges to use a tap device.
You can access a preconfigured tap device but you cannot allocate a tap
device and connect it to a bridge without CAP_NET_ADMIN.
Regards,
Anthony Liguori
