On Mon, 2018-01-22 at 17:50 +0100, Michael Biebl wrote:
> On Sat, 20 Jan 2018 18:21:33 +0100 Alexander Kurtz <alexan...@kurtz.be> wrote:
> > Package: systemd
> > Version: 236-3
> > 
> > Hi!
> > 
> > Until recently, /dev/kvm was made accessible to local users by this
> > line in /lib/udev/rules.d/70-uaccess.rules:
> > 
> >     # KVM
> >     SUBSYSTEM=="misc", KERNEL=="kvm", TAG+="uaccess"
> > 
> > However, as of systemd 236, the above rule seems to be gone. After
> > reading up a bit on systemd's upstream and Debian bug tracker, I'm even
> > more confused than before: Which package is supposed to manage
> > permissions on /dev/kvm in Debian? Which package is supposed to create
> > the "kvm" group? Is the missing access for local users intentional?
> 
> Isn't this setup by the qemu package in
> /lib/udev/rules.d/60-qemu-system-common.rules:KERNEL=="kvm",
> GROUP="kvm", MODE="0660"

Yes, but only partially: This is the full rule shipped by QEMU:

        $ cat /lib/udev/rules.d/60-qemu-system-common.rules 
        KERNEL=="kvm", GROUP="kvm", MODE="0660"
        $ 

This rule only manages the basic group ownership and permissions. It
does not add the "uaccess" tag, which is (presumably) used by logind to
dynamically grant local users access via ACLs. This used to work before
with systemd <236 and doesn't work now. Is this intentional?

Best regards

Alexander Kurtz

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to