Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 48bb09ee authored by Alex Williamson's avatar Alex Williamson Committed by Avi Kivity
Browse files

KVM: remove CAP_SYS_RAWIO requirement from kvm_vm_ioctl_assign_irq 



Remove this check in an effort to allow kvm guests to run without
root privileges.  This capability check doesn't seem to add any
security since the device needs to have already been added via the
assign device ioctl and the io actually occurs through the pci
sysfs interface.

Signed-off-by: default avatarAlex Williamson <alex.williamson@redhat.com>
Signed-off-by: default avatarMarcelo Tosatti <mtosatti@redhat.com>
parent aad82703

virt/kvm/assigned-dev.c

+0 −3
Original line number Diff line number Diff line
@@ -448,9 +448,6 @@ static int kvm_vm_ioctl_assign_irq(struct kvm *kvm, 
	struct kvm_assigned_dev_kernel *match;

	unsigned long host_irq_type, guest_irq_type;



	if (!capable(CAP_SYS_RAWIO))

		return -EPERM;



	if (!irqchip_in_kernel(kvm))

		return r;