|   | 
      | 
  
  
      | 
      | 
  
 
     | 
    | 
  
  
     | 
    | 
  
  
    |   | 
      | 
  
  
    | 
         
xen-users
Re: [Xen-users] ACL for DomUs
 
On Wed, May 02, 2007 at 10:46:37AM +0200, Reinhard Brandst?dter wrote:
> > This looks pretty promising and of course I had to try it immediately.
  :)
> The reason for this behavior was that the user using the xen-shell didn't 
> have 
> rights to read the /etc/xen directory. with the right permissions xen-shell 
> shows the available machines.
  I'll add a check to make sure that is reported accurately at startup.
> 1.) either make xen-shell aware of wildcards. If a domU 'name=' contains 
> any %d in the xen config, all VMs that match are added to the user's access 
> list.
  That seems like it would be less general than I'd like.
> 2.) everytime a domain is created and its name is based on a wildcard create 
> a 'dummy' xen config file that only contains the resulting domain name and 
> the xen_shell attribute. e.g. for me that would be:
> 
> /etc/xen/apache-1
> name = "apache-1"
> xen_shell = 'apacheadm'
  That is the solution I'd propose since it fits your usage, and
 requires no changes from me!
Steve
-- 
# Commercial Debian GNU/Linux Support
http://www.linux-administration.org/
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users
 
 |   
 
 | 
    | 
  
  
    |   | 
    |