> another approach is to setup device mapping
> properly to allow certain 'considered secure'
> devices to be created inside a guest
> yet another (but insecure) approach is to give
> the bcapability to create arbitrary device nodes
> to the guest
you can give device mapping without the bcapability ? my last try failed
to work with this setup. Can you give an exemple of how should work the
device mapping with a simple exemple of
exemple for /dev/random for exemple ?
-- Cordialement, Ghislain