From unknown Fri Jun 20 07:19:26 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#49134 <49134@debbugs.gnu.org> To: bug#49134 <49134@debbugs.gnu.org> Subject: Status: [PATCH] services: libvirt: Change unix-sock-group default. Reply-To: bug#49134 <49134@debbugs.gnu.org> Date: Fri, 20 Jun 2025 14:19:26 +0000 retitle 49134 [PATCH] services: libvirt: Change unix-sock-group default. reassign 49134 guix-patches submitter 49134 Brice Waegeneire severity 49134 normal tag 49134 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Sun Jun 20 09:39:49 2021 Received: (at submit) by debbugs.gnu.org; 20 Jun 2021 13:39:49 +0000 Received: from localhost ([127.0.0.1]:33253 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1luxfx-0004MQ-8Z for submit@debbugs.gnu.org; Sun, 20 Jun 2021 09:39:49 -0400 Received: from lists.gnu.org ([209.51.188.17]:43910) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1luxfv-0004MI-VP for submit@debbugs.gnu.org; Sun, 20 Jun 2021 09:39:48 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39010) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1luxfv-0004Rg-N0 for guix-patches@gnu.org; Sun, 20 Jun 2021 09:39:47 -0400 Received: from relay6-d.mail.gandi.net ([217.70.183.198]:46981) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1luxfu-0006jI-06 for guix-patches@gnu.org; Sun, 20 Jun 2021 09:39:47 -0400 Received: (Authenticated sender: brice@waegenei.re) by relay6-d.mail.gandi.net (Postfix) with ESMTPSA id 65A6CC0003 for ; Sun, 20 Jun 2021 13:39:42 +0000 (UTC) From: Brice Waegeneire To: guix-patches@gnu.org Subject: [PATCH] services: libvirt: Change unix-sock-group default. Date: Sun, 20 Jun 2021 15:39:40 +0200 Message-Id: <20210620133940.17491-1-brice@waegenei.re> X-Mailer: git-send-email 2.31.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=217.70.183.198; envelope-from=brice@waegenei.re; helo=relay6-d.mail.gandi.net X-Spam_score_int: -25 X-Spam_score: -2.6 X-Spam_bar: -- X-Spam_report: (-2.6 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.6 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.6 (--) When accessing libvrtd remotely, polkit can't be used unless you are logged as root. Instead allow libvirt groups member access to the control socket. * gnu/services/virtualization.scm (libvirt-configuration) [unix-sock-group]: Change default from "root" to "libvirt". --- gnu/services/virtualization.scm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gnu/services/virtualization.scm b/gnu/services/virtualization.scm index 36e9feb05c..126fa52279 100644 --- a/gnu/services/virtualization.scm +++ b/gnu/services/virtualization.scm @@ -168,7 +168,7 @@ stopping the Avahi daemon.") "Default mDNS advertisement name. This must be unique on the immediate broadcast network.") (unix-sock-group - (string "root") + (string "libvirt") "UNIX domain socket group ownership. This can be used to allow a 'trusted' set of users access to management capabilities without becoming root.") -- 2.31.1 From debbugs-submit-bounces@debbugs.gnu.org Fri Sep 03 12:09:51 2021 Received: (at 49134) by debbugs.gnu.org; 3 Sep 2021 16:09:51 +0000 Received: from localhost ([127.0.0.1]:45794 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mMBl5-0008Nw-CZ for submit@debbugs.gnu.org; Fri, 03 Sep 2021 12:09:51 -0400 Received: from eggs.gnu.org ([209.51.188.92]:44938) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mMBl3-0008Ni-BZ for 49134@debbugs.gnu.org; Fri, 03 Sep 2021 12:09:37 -0400 Received: from fencepost.gnu.org ([2001:470:142:3::e]:48048) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1mMBkx-0003GW-UG; Fri, 03 Sep 2021 12:09:31 -0400 Received: from [2a01:e0a:1d:7270:af76:b9b:ca24:c465] (port=48848 helo=ribbon) by fencepost.gnu.org with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1mMBkv-0008Fm-Bt; Fri, 03 Sep 2021 12:09:31 -0400 From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Brice Waegeneire Subject: Re: bug#49134: [PATCH] services: libvirt: Change unix-sock-group default. References: <20210620133940.17491-1-brice@waegenei.re> Date: Fri, 03 Sep 2021 18:09:27 +0200 In-Reply-To: <20210620133940.17491-1-brice@waegenei.re> (Brice Waegeneire's message of "Sun, 20 Jun 2021 15:39:40 +0200") Message-ID: <87ilzh1w08.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 49134 Cc: 49134@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Hi, Brice Waegeneire skribis: > When accessing libvrtd remotely, polkit can't be used unless you are > logged as root. Instead allow libvirt groups member access to the > control socket. > > * gnu/services/virtualization.scm (libvirt-configuration) > [unix-sock-group]: Change default from "root" to "libvirt". LGTM! Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Sat Sep 04 03:34:47 2021 Received: (at 49134-done) by debbugs.gnu.org; 4 Sep 2021 07:34:47 +0000 Received: from localhost ([127.0.0.1]:46416 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mMQCN-00053C-Cd for submit@debbugs.gnu.org; Sat, 04 Sep 2021 03:34:47 -0400 Received: from relay12.mail.gandi.net ([217.70.178.232]:45121) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1mMQCL-00052u-Ko for 49134-done@debbugs.gnu.org; Sat, 04 Sep 2021 03:34:46 -0400 Received: (Authenticated sender: brice@waegenei.re) by relay12.mail.gandi.net (Postfix) with ESMTPSA id 9A525200003; Sat, 4 Sep 2021 07:34:39 +0000 (UTC) From: Brice Waegeneire To: Ludovic =?utf-8?Q?Court=C3=A8s?= Subject: Re: bug#49134: [PATCH] services: libvirt: Change unix-sock-group default. References: <20210620133940.17491-1-brice@waegenei.re> <87ilzh1w08.fsf@gnu.org> Date: Sat, 04 Sep 2021 09:34:35 +0200 In-Reply-To: <87ilzh1w08.fsf@gnu.org> ("Ludovic =?utf-8?Q?Court=C3=A8s=22'?= =?utf-8?Q?s?= message of "Fri, 03 Sep 2021 18:09:27 +0200") Message-ID: <87eea4hjzo.fsf_-_@waegenei.re> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 49134-done Cc: 49134-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Ludovic Court=C3=A8s writes: > Brice Waegeneire skribis: > >> * gnu/services/virtualization.scm (libvirt-configuration) >> [unix-sock-group]: Change default from "root" to "libvirt". > > LGTM! Thank for the reviews Ludo=E2=80=99, pushed as 4dc17cd54e86dbd71d26b8713866= 0d42e8f615a9. From unknown Fri Jun 20 07:19:26 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sat, 02 Oct 2021 11:24:05 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator