Re: [Qemu-devel] PATCH: 7/7: Add external persistent ACL file

[Daniel P. Berrange]

On Sat, Feb 14, 2009 at 04:16:25PM -0600, Anthony Liguori wrote:
> 
> I feel really uncomfortable with this especially since Markus is now 
> working on configuration file support.  It seems to me that we'll want 
> to store any ACL information in the host configuration file.
> 
> Unless there's a really strong case that you always want ACLs to be 
> stored in a separate file, I'd rather wait to see how the host 
> configuration file stuff turns out before applying this.

I rather wanted the ACL configuration to be separate from the 
general emulator configuration. This file format was intended to
allow you to have one ACL file that is used across all your QEMU
instances, regardless of what emulator configuration file they
might be using.

Though, perhaps if the general config file allowed '#include acl.cfg'
that would be sufficient flexibilty, allowing a shared ACL for all
configs.

> I assume that libvirt will use the monitor interface anyway so 
> presumably, it's not a huge problem to wait on this?

I'm not really decided on what the best way to approach things is from
the libvirt POV. We could certainly use the monitor interface to set it
up - just have to decide how/where to persist it.

Daniel
-- 
|: Red Hat, Engineering, London   -o-   http://people.redhat.com/berrange/ :|
|: http://libvirt.org  -o-  http://virt-manager.org  -o-  http://ovirt.org :|
|: http://autobuild.org       -o-         http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505  -o-  F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|