From mboxrd@z Thu Jan  1 00:00:00 1970
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
	id 1N5xa6-00025n-1j
	for qemu-devel@nongnu.org; Thu, 05 Nov 2009 03:20:34 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
	id 1N5xa1-00023d-Gx
	for qemu-devel@nongnu.org; Thu, 05 Nov 2009 03:20:33 -0500
Received: from [199.232.76.173] (port=43682 helo=monty-python.gnu.org)
	by lists.gnu.org with esmtp (Exim 4.43) id 1N5xa1-00023Y-Df
	for qemu-devel@nongnu.org; Thu, 05 Nov 2009 03:20:29 -0500
Received: from mx1.redhat.com ([209.132.183.28]:1025)
	by monty-python.gnu.org with esmtp (Exim 4.60)
	(envelope-from <mst@redhat.com>) id 1N5xa1-0004xb-2C
	for qemu-devel@nongnu.org; Thu, 05 Nov 2009 03:20:29 -0500
Date: Thu, 5 Nov 2009 10:17:52 +0200
From: "Michael S. Tsirkin" <mst@redhat.com>
Subject: Re: [Qemu-devel] Re: [PATCH 0/4] net-bridge: rootless bridge
	support for qemu
Message-ID: <20091105081752.GA5774@redhat.com>
References: <1257294485-27015-1-git-send-email-aliguori@us.ibm.com>
	<20091104170406.GA461@redhat.com> <4AF1DA71.2000209@codemonkey.ws>
	<20091104200423.GA935@redhat.com> <4AF1E7AA.5070409@codemonkey.ws>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4AF1E7AA.5070409@codemonkey.ws>
List-Id: qemu-devel.nongnu.org
List-Unsubscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/pipermail/qemu-devel>
List-Post: <mailto:qemu-devel@nongnu.org>
List-Help: <mailto:qemu-devel-request@nongnu.org?subject=help>
List-Subscribe: <http://lists.nongnu.org/mailman/listinfo/qemu-devel>,
	<mailto:qemu-devel-request@nongnu.org?subject=subscribe>
To: Anthony Liguori <anthony@codemonkey.ws>
Cc: Mark McLoughlin <markmc@redhat.com>, Arnd Bergmann <arndbergmann@googlemail.com>, Dustin Kirkland <kirkland@canonical.com>, qemu-devel@nongnu.org, Juan Quintela <quintela@redhat.com>

On Wed, Nov 04, 2009 at 02:44:26PM -0600, Anthony Liguori wrote:
> Michael S. Tsirkin wrote:
>>> Well it doesn't really help with the issue of privileges which is 
>>> what  this series is really about.
>>>
>>> Regards,
>>>
>>> Anthony Liguori
>>>     
>>
>> I note that by default you grant all users all access.
>> If you do that, just give them net cap admin already?
>>   
>
> By default, I give no users any access.

Oh, I misunderstood. This is what gave me the idea:

] If we fail to include an acl file, we are silent about it making this mechanism
] work pretty seamlessly.

What did you mean, in fact?

-- 
MST