From mboxrd@z Thu Jan 1 00:00:00 1970 From: Iordan Iordanov Subject: Re: restricting users to only power control of VMs Date: Tue, 21 Jun 2011 17:45:27 -0400 Message-ID: <4E0110F7.4070903@cdf.toronto.edu> References: <4DEFBB15.9080307@cdf.toronto.edu> <4DF08101.5070100@redhat.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: kvm@vger.kernel.org To: Avi Kivity Return-path: Received: from penguin.cdf.utoronto.ca ([128.100.31.106]:36196 "HELO smtp.cdf.toronto.edu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with SMTP id S1752255Ab1FUVp2 (ORCPT ); Tue, 21 Jun 2011 17:45:28 -0400 In-Reply-To: <4DF08101.5070100@redhat.com> Sender: kvm-owner@vger.kernel.org List-ID: Hi Avi, On 06/09/11 04:14, Avi Kivity wrote: > On 06/08/2011 09:10 PM, Iordan Iordanov wrote: >> As the subject suggests, we are wondering whether there is any way to >> restrict certain classes of users from performing any action other >> than powering a VM up and down, and resetting it? snip... > > It's a job for the management layer; I think it should be easy to script > libvirt to do this. > I read the documentation of libvirt, and out of the box, I don't see how this can be "configured". So, I understand your reply as meaning that we need to write a program that uses the libvirt API to control this? If I haven't understood properly, can you please correct me? Thanks! Iordan