From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1N76PP-0002WA-Aw for qemu-devel@nongnu.org; Sun, 08 Nov 2009 06:58:15 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1N76PK-0002Q0-HW for qemu-devel@nongnu.org; Sun, 08 Nov 2009 06:58:14 -0500 Received: from [199.232.76.173] (port=58965 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1N76PK-0002Pk-5m for qemu-devel@nongnu.org; Sun, 08 Nov 2009 06:58:10 -0500 Received: from mx1.redhat.com ([209.132.183.28]:23134) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1N76PJ-0003Cl-Jj for qemu-devel@nongnu.org; Sun, 08 Nov 2009 06:58:09 -0500 Date: Sun, 8 Nov 2009 13:55:28 +0200 From: "Michael S. Tsirkin" Subject: Re: [Qemu-devel] [PATCH 0/4] net-bridge: rootless bridge support for qemu Message-ID: <20091108115528.GA19022@redhat.com> References: <1257294485-27015-1-git-send-email-aliguori@us.ibm.com> <20091105082125.GB5774@redhat.com> <20091106020350.GH21630@shareable.org> <200911061258.51303.arnd@arndb.de> <20091106202629.GB27751@shareable.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20091106202629.GB27751@shareable.org> List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Jamie Lokier Cc: Mark McLoughlin , Anthony Liguori , Arnd Bergmann , Arnd Bergmann , Juan Quintela , Dustin Kirkland , qemu-devel@nongnu.org On Fri, Nov 06, 2009 at 08:26:29PM +0000, Jamie Lokier wrote: > But imho it'd be far nicer not to have "specialness" like that unless > you want it for some positive reason like security. OTOH, if you do want this for security, there's currently no way to do this besides using raw sockets + macvlan. -- MST