--- Begin Message ---
Subject: |
[PATCH] services: libvirt: Change unix-sock-group default. |
Date: |
Sun, 20 Jun 2021 15:39:40 +0200 |
When accessing libvrtd remotely, polkit can't be used unless you are
logged as root. Instead allow libvirt groups member access to the
control socket.
* gnu/services/virtualization.scm (libvirt-configuration)
[unix-sock-group]: Change default from "root" to "libvirt".
---
gnu/services/virtualization.scm | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gnu/services/virtualization.scm b/gnu/services/virtualization.scm
index 36e9feb05c..126fa52279 100644
--- a/gnu/services/virtualization.scm
+++ b/gnu/services/virtualization.scm
@@ -168,7 +168,7 @@ stopping the Avahi daemon.")
"Default mDNS advertisement name. This must be unique on the
immediate broadcast network.")
(unix-sock-group
- (string "root")
+ (string "libvirt")
"UNIX domain socket group ownership. This can be used to
allow a 'trusted' set of users access to management capabilities
without becoming root.")
--
2.31.1
--- End Message ---
--- Begin Message ---
Subject: |
Re: bug#49134: [PATCH] services: libvirt: Change unix-sock-group default. |
Date: |
Sat, 04 Sep 2021 09:34:35 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) |
Ludovic Courtès <ludo@gnu.org> writes:
> Brice Waegeneire <brice@waegenei.re> skribis:
>
>> * gnu/services/virtualization.scm (libvirt-configuration)
>> [unix-sock-group]: Change default from "root" to "libvirt".
>
> LGTM!
Thank for the reviews Ludo’, pushed as 4dc17cd54e86dbd71d26b87138660d42e8f615a9.
--- End Message ---