From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1N65T1-0005yI-9T for qemu-devel@nongnu.org; Thu, 05 Nov 2009 11:45:47 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1N65Sw-0005rC-Bf for qemu-devel@nongnu.org; Thu, 05 Nov 2009 11:45:46 -0500 Received: from [199.232.76.173] (port=33227 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1N65Sw-0005qs-1M for qemu-devel@nongnu.org; Thu, 05 Nov 2009 11:45:42 -0500 Received: from e2.ny.us.ibm.com ([32.97.182.142]:48365) by monty-python.gnu.org with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.60) (envelope-from ) id 1N65Sv-0002g0-MT for qemu-devel@nongnu.org; Thu, 05 Nov 2009 11:45:41 -0500 Received: from d01relay07.pok.ibm.com (d01relay07.pok.ibm.com [9.56.227.147]) by e2.ny.us.ibm.com (8.14.3/8.13.1) with ESMTP id nA5GbwIS021425 for ; Thu, 5 Nov 2009 11:37:58 -0500 Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by d01relay07.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id nA5GjZNH1048682 for ; Thu, 5 Nov 2009 11:45:35 -0500 Received: from d01av02.pok.ibm.com (loopback [127.0.0.1]) by d01av02.pok.ibm.com (8.14.3/8.13.1/NCO v10.0 AVout) with ESMTP id nA5Cfm4w031761 for ; Thu, 5 Nov 2009 07:41:49 -0500 Message-ID: <4AF30129.7080203@us.ibm.com> Date: Thu, 05 Nov 2009 10:45:29 -0600 From: Anthony Liguori MIME-Version: 1.0 Subject: Re: [Qemu-devel] [PATCH 0/4] net-bridge: rootless bridge support for qemu References: <1257294485-27015-1-git-send-email-aliguori@us.ibm.com> <4AF2E247.3090409@redhat.com> <4AF2E2E3.1030600@redhat.com> <4AF2E638.8050302@us.ibm.com> <4AF2E9CA.4060008@redhat.com> <4AF2F449.6040308@us.ibm.com> <4AF2F700.90605@redhat.com> <4AF2FAFC.9050606@us.ibm.com> <20091105163702.GC21630@shareable.org> In-Reply-To: <20091105163702.GC21630@shareable.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Jamie Lokier Cc: Mark McLoughlin , Arnd Bergmann , Juan Quintela , Dustin Kirkland , qemu-devel@nongnu.org, Michael Tsirkin , Avi Kivity Jamie Lokier wrote: > Anthony Liguori wrote: > >> Avi Kivity wrote: >> >>> No, of course not, I use qemu from the command line and would benefit >>> >> >from -net bridge. My badly-conveyed objection is that qemu should not >> >>> take a system management role (and enforce system-wide policies) but >>> leave that to system management tools. >>> >> I do not consider this system management functional no more than I see >> providing a global configuration file as system management functional. >> They are both mechanisms. The ACL file is a mechanism just like VNC >> sasl ACLs are a mechanism. >> > > That's why I would like there to be options to either pass to the > helper program, or specify a different helper program. (Sorry if > that's already in the patches - for some reason I received 0/4 but > didn't receive the 4 patch emails). > > There's no need for QEMU to be cleverer than that, and that puts the > whole policy in the hands of the user - where it should be. > > It'd still install the default helper you've provided and use it by > default, of course. > That's already how it behaves. You can say -net bridge,helper=/usr/local/bin/my-helper -- Regards, Anthony Liguori