On 16.02.2017 13:47, Marc-André Lureau wrote:
> Hi
>
> On Fri, Feb 10, 2017 at 6:57 PM Michal Privoznik
> wrote:
>
>> When enabling virgl, qemu opens /dev/dri/render*. So far, we are
>> not allowing that in devices cgroup nor creating the file in
>> domain's namespace and thus requiring users to
Hi
On Fri, Feb 10, 2017 at 6:57 PM Michal Privoznik
wrote:
> When enabling virgl, qemu opens /dev/dri/render*. So far, we are
> not allowing that in devices cgroup nor creating the file in
> domain's namespace and thus requiring users to set the paths in
> qemu.conf. This, however, is suboptimal
When enabling virgl, qemu opens /dev/dri/render*. So far, we are
not allowing that in devices cgroup nor creating the file in
domain's namespace and thus requiring users to set the paths in
qemu.conf. This, however, is suboptimal as it allows access to
ALL qemu processes even those which don't have