Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Nov 2018 17:19:02 +0000
From:      bugzilla-noreply@freebsd.org
To:        virtualization@FreeBSD.org
Subject:   [Bug 213689] Allow bhyve to run from non-root user
Message-ID:  <bug-213689-27103-I5Dm5WxTuf@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-213689-27103@https.bugs.freebsd.org/bugzilla/>
References:  <bug-213689-27103@https.bugs.freebsd.org/bugzilla/>

index | next in thread | previous in thread | raw e-mail

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=213689

shamaz.mazum@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |shamaz.mazum@gmail.com

--- Comment #5 from shamaz.mazum@gmail.com ---
Hello again!

I am currently using /dev/vmmctl device to allow non-root users to use bhyve as
I described above. Unfortunately, this approach does not allow me to use PCI
devices pass-through, as it demands access to /dev/pci, /dev/io and /dev/mem
(as far as I remember).

After updating to 12.0-RC1 I have noticed, that ntpd uses MAC framework now (I
didn't know about MAC existence before).

Can this approach (writing specific MAC policy module) be used to grant
unprivileged bhyve process access to certain files in /dev ?

What other solutions to this problem could be?

-- 
You are receiving this mail because:
You are the assignee for the bug.

help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-213689-27103-I5Dm5WxTuf>