Re: [Qemu-devel] [PATCH 0/4] net-bridge: rootless bridge support for qemu

[Avi Kivity <avi@redhat.com>]

On 11/05/2009 05:11 PM, Avi Kivity wrote:
> But we're forcing our style of security management on them.  How to 
> store permissions is the management system's job (and for a clu^Houd, 
> it will typically be stored in a central database, not be scattered 
> around /etc).
>
> Again, IMO we should stick to making a guest work, and leave all the 
> glue to management.
>

As an example of why this is so, if the management stack wants to 
configure the tap interface further (say, add some ebtables rules 
guarding the new interface) it must push this into qemu or stop using 
-net bridge.

Having the tap accessible to management also allows it to run tcpdump or 
collect statistics on it at runtime.

-- 
error compiling committee.c: too many arguments to function