Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 19 Nov 2018 17:19:02 +0000
From:      bugzilla-noreply@freebsd.org
To:        virtualization@FreeBSD.org
Subject:   [Bug 213689] Allow bhyve to run from non-root user
Message-ID:  <bug-213689-27103-I5Dm5WxTuf@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-213689-27103@https.bugs.freebsd.org/bugzilla/>
References:  <bug-213689-27103@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D213689

shamaz.mazum@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |shamaz.mazum@gmail.com

--- Comment #5 from shamaz.mazum@gmail.com ---
Hello again!

I am currently using /dev/vmmctl device to allow non-root users to use bhyv=
e as
I described above. Unfortunately, this approach does not allow me to use PCI
devices pass-through, as it demands access to /dev/pci, /dev/io and /dev/mem
(as far as I remember).

After updating to 12.0-RC1 I have noticed, that ntpd uses MAC framework now=
 (I
didn't know about MAC existence before).

Can this approach (writing specific MAC policy module) be used to grant
unprivileged bhyve process access to certain files in /dev ?

What other solutions to this problem could be?

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-213689-27103-I5Dm5WxTuf>