Subject: bug#36335: Is /dev/kvm missing ACLs?

From: Chris Marusich <[email-masked]>
Date: Wed, 26 Jun 2019 23:32:37 -0700

Hi Ludo,

Ludovic Courtès <[email-masked]> writes:

> Guix System doesn’t use ACLs at all.
>
> However, the udev rule for kvm sets it up like this:
>
>   crw-rw---- 1 root kvm 10, 232 Jun 24 08:38 /dev/kvm
>
> and the build users are part of the ‘kvm’ group.  I personally arrange
> to have my user account in that group too.

It's good to know that the "kvm" group is the right way to grant
permissions.  However, if Guix System doesn't use ACLs, then why do some
of my device files have ACLs on them, such as the video device file?

--8<---------------cut here---------------start------------->8---
$ getfacl /dev/video0 
getfacl: Removing leading '/' from absolute path names
# file: dev/video0
# owner: root
# group: video
user::rw-
user:marusich:rw-
group::rw-
mask::rw-
other::---
--8<---------------cut here---------------end--------------->8---

-- 
Chris