ADNET Ghislain wrote:
>> another approach is to setup device mapping
>> properly to allow certain 'considered secure'
>> devices to be created inside a guest
>> yet another (but insecure) approach is to give
>> the bcapability to create arbitrary device nodes
>> to the guest
> you can give device mapping without the bcapability ? my last try failed
> to work with this setup. Can you give an exemple of how should work the
> device mapping with a simple exemple of
No, if your kernel is configured with device mapping, you need to give the guest CAP_MKNOD
and setup the device mapping tables to allow it to do whatever it is you're looking for.
-- Daniel Hokka ZakrissonReceived on Tue Mar 24 11:49:36 2009