Re: [Xen-users] Access control for the xm command

[Grant McWilliams <grantmasterflash@xxxxxxxxx>]

On Tue, Mar 31, 2009 at 10:33 AM, Keith Coleman <list.keith@xxxxxxxxxxx> wrote:

On 3/31/09, Martti Kuparinen <martti.kuparinen@xxxxxx> wrote:
> Hi,
>
> ÂSay I have these domUs and their administrators on my dom0:
>
> Âguest  admin(s)
> Â----- Â --------
> Âvm1 Â Â user1, user3
> Âvm2 Â Â user2, user3
> Âvm3 Â Â user3
>
> ÂEach administrator should be able to do whatever he wants to do with the xm
> command on the domU he's maintaining but he should not be able to perform
> any xm actions on domUs where he's not supposed to have access to. So
> instead of giving general access for "sudo xm ..." I need something more
> fine grained.
>
> ÂInstead of writing my own script to check user's access to the given domU,
> is there any nice wrapper script for xm which already does this kind of
> access control checks? I hate reinventing the wheel again...
>
> ÂMy dom0 is Debian 5.0 with self-compiled Xen 3.3.1 and libvirtd 0.6.1 if
> that makes any difference...
>
> ÂMartti
>

>

Xen Shell - http://www.xen-tools.org/software/xen-shell/


Keith Coleman

If you can get it to work as any user other than root. I couldn't after several hours and never had time to find out why.

Grant McWilliams

Some people, when confronted with a problem, think "I know, I'll use Windows." 

Now they have two problems.


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users