Subject: bug#36335: Is /dev/kvm missing ACLs?

From: Danny Milosavljevic <[email-masked]>
Date: Thu, 11 Jul 2019 09:18:07 +0200

auditd can find those acl setters :)

# auditctl -w /dev/kvm -p a -k kvm-acl-setter-foo

Later on:

# ausearch -k kvm-acl-setter-foo