From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits)) (No client certificate requested) by lists.proxmox.com (Postfix) with ESMTPS id 33D8B9DBD0 for ; Tue, 6 Jun 2023 08:55:04 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 0DCA430461 for ; Tue, 6 Jun 2023 08:54:34 +0200 (CEST) Received: from mail02.cetsi.fr (mail02.cetsi.fr [91.151.64.22]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by firstgate.proxmox.com (Proxmox) with ESMTPS for ; Tue, 6 Jun 2023 08:54:33 +0200 (CEST) Received: from CYLNEXC01.cyllene.corp (unknown [10.0.250.28]) by mail02.cetsi.fr (Postfix) with ESMTP id CE7B1405028B for ; Tue, 6 Jun 2023 08:54:31 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 mail02.cetsi.fr CE7B1405028B DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=groupe-cyllene.com; s=dkim; t=1686034471; bh=tQIZJHpAmwZi79WGVJe9XK+bi8A9iZM4dOwteOS714U=; h=From:To:Subject:Date:References:In-Reply-To:From; b=JkhgohdjhzLkUgha4TijmV3f+mtqj1LhLS6bcFClMFX6rTg9AZ35qp3gS6HnR7oJQ jnXQLDCJL++OR1I8YjQlL9ybPToX72ND7+qF0AMhhTQFSzHjeLFIXHRRBUzOkQytkk oat8Tdsz2FPaXdio+Z9I9Jr0wQLSDsC4oBxWhsCk= Received: from CYLNEXC01.cyllene.corp (10.0.250.28) by CYLNEXC01.cyllene.corp (10.0.250.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.23; Tue, 6 Jun 2023 08:54:32 +0200 Received: from FRA01-PR2-obe.outbound.protection.outlook.com (10.0.250.254) by CYLNEXC01.cyllene.corp (10.0.250.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.1.2507.23 via Frontend Transport; Tue, 6 Jun 2023 08:54:32 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BueLE0gJ8cZO5aEC8q83FbxM3s+R0rVb+s1AhXroXyPXCpfaYUvE7LiS5dRm9c2PRbS2bwTTHBhk/Y88DlDGYGbPv25B74qTCaH+8ZhbU9A6a8K1PdIYqiQ74J45eC5LXrWtxW/cwcyjXR4k+eBma/z5a/UIPwAEv4on/C9/JYoHnuZ02yJpmpBUjCeUe4f/QBKEIuDtRZR/xiVn/X1OjPTuLqMfGwiYfXxPb7Mk+WAktrD/CchY0eq9UrMTWvkfYCfggzArSaozUa1+PMpW4tLvk+INmSZfgqOBokaisxEpLVPyno8y4WVoiOZYiqkm25BoN+qO/mg1BrqTxygRTA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=tQIZJHpAmwZi79WGVJe9XK+bi8A9iZM4dOwteOS714U=; b=SCKuNPSTxrh4+Wjg30MkyAS9IpnSAbcPt+6qrazrtwqbvVP0MAYwdDgr+vDnLmJg/FnTpGFgM+wvqyuW1cpGlrSEqXwiPqHjzwvzD7MUcmipEMHlr7OF/FLttmrVtKNipnWYHAhJu57uEZiMaSCnmmyYlotw/JW7sacpxcC8xMm/EcoB07p8yKOOEjLCac1tsqBKnmCxgb0yM+Ycfm3XGORXGN3eih9qWPVkG8d50in0yQovPad8kixiInaLxO7CJiskzuq0U5FHECPUo5qGA4+5DrJJoHaeyl8UbPjpe6ljsPbPhdVS7/mXyiw+TlSmM0pEPUu1TQ3Xet9ZFxoSKw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=groupe-cyllene.com; dmarc=pass action=none header.from=groupe-cyllene.com; dkim=pass header.d=groupe-cyllene.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=groupecyllene.onmicrosoft.com; s=selector2-groupecyllene-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tQIZJHpAmwZi79WGVJe9XK+bi8A9iZM4dOwteOS714U=; b=nwOutQI3PSsJwQEIwAr6Rn8BvOgrXRqsUdzY7uFoLK2bbQM5+bjOFwZZoUvipgzAlg4NxnmKaI4Tf7pDCG9ukJM0GZgNzZqTk6IoGAyjr0rbL8xNBxY5xcXk9qwDi3jZt6RuQVM2RUX95ebNPLi+hd2Ayo5WDW3JB2/koox64uk= Received: from MR1P264MB2481.FRAP264.PROD.OUTLOOK.COM (2603:10a6:501:32::17) by PR1P264MB2062.FRAP264.PROD.OUTLOOK.COM (2603:10a6:102:193::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.6455.32; Tue, 6 Jun 2023 06:54:31 +0000 Received: from MR1P264MB2481.FRAP264.PROD.OUTLOOK.COM ([fe80::cef1:6229:8d42:b0ee]) by MR1P264MB2481.FRAP264.PROD.OUTLOOK.COM ([fe80::cef1:6229:8d42:b0ee%2]) with mapi id 15.20.6455.030; Tue, 6 Jun 2023 06:54:31 +0000 From: "DERUMIER, Alexandre" To: "pve-devel@lists.proxmox.com" Thread-Topic: [pve-devel] [PATCH-SERIE pve-access-control/pve-manager/qemu-server] check permissions on local bridge Thread-Index: AQHZlz2O91jSbGerSE+OnT7kvcrZwa97/jqAgAFD+gCAABbLgA== Date: Tue, 6 Jun 2023 06:54:31 +0000 Message-ID: <48d2176fec4cb32dec1889cb2e6efeda1fec4c64.camel@groupe-cyllene.com> References: <20230604233709.1340089-1-aderumier@odiso.com> <1685958374.jxhx4d0md8.astroid@yuna.none> <45c767c555473f0969dd1036627c9f9b76d2c340.camel@groupe-cyllene.com> In-Reply-To: <45c767c555473f0969dd1036627c9f9b76d2c340.camel@groupe-cyllene.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.48.1-0ubuntu1 authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=groupe-cyllene.com; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MR1P264MB2481:EE_|PR1P264MB2062:EE_ x-ms-office365-filtering-correlation-id: a0134c16-444a-4079-2809-08db665ae0fa x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MR1P264MB2481.FRAP264.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230028)(4636009)(136003)(376002)(396003)(366004)(346002)(39850400004)(451199021)(36756003)(2906002)(4744005)(38070700005)(86362001)(5660300002)(76116006)(6486002)(71200400001)(186003)(6506007)(6512007)(91956017)(478600001)(38100700002)(66556008)(66946007)(122000001)(66476007)(2616005)(6916009)(66446008)(316002)(64756008)(8936002)(8676002)(41300700001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?N1U3MFhhZnEvb2cwdFZNWisxSWttUE9JNUszeXVnd2hjazhGM2RwMnZVdWYz?= =?utf-8?B?dEhCZTZycEJ1R0JFN2FhRE4wR0RudWRkRUpoOXhYaTZMaXZBb3BySllEVTRZ?= =?utf-8?B?WXdheEludHBQaHJYK1A4SWJrV2hPM0h4NWYwMzZhblVhU252YSsvclhSQWVo?= =?utf-8?B?UnBOWk52RjBoQ0ZqY2E1TCtjVEpDL1hNdTc1WFIzb2dZSWE4ZDVDMUh4d3li?= =?utf-8?B?ZXZQanBURWZxRGs2elZSNUU0eU9ucFNMZFY3OS93OWFONmZ0WGw0dUR2VS9w?= =?utf-8?B?S0psVXpnOXM0TzJrYzVKbTZLcENVL0NENi9IdWNhSjNHbTRLL2NpVkhGak8w?= =?utf-8?B?NTNYQ1lvNmE3TDN0VkNVL0k5NElocmZGSFd0Q0xCRC9BOUptSWR0aEw0Zyt3?= =?utf-8?B?YzVGeFUzVGFYSDdFYlNnSHdtT3owTGJzL3FsNzRrZ21sTElLWFQzd2xvLysr?= =?utf-8?B?RFAwNXRlbTRsUFYvczN4K0VFQ2oxSGg1ZHo2VnVnYVd5em5wS2Q1OXJIRENL?= =?utf-8?B?TDMzb3JiemRvcFV6cWpJZGlDNU56Q2FwdmloUEh6MWNBd3M5MzJsWm9aL1FI?= =?utf-8?B?d1d5bEk5ZnRTU0t0R2JmT2dKa2xueEM0d09WdWlkendZVVQ1cndZOHRldlY4?= =?utf-8?B?VDdYOURvaXlJUDRzQXpMOWxTZTVmMnI2TzFZb0dIaDB3dnpQMGMxTUVJQmVv?= =?utf-8?B?NDJxYW9VYkw1SzNvbzlLeWZwUkFodFp1VUhsVDhCR0JXRS9QYkVEVTEwTjc0?= =?utf-8?B?emdtRXA2dVE0SjlMaWFZQjBQSE5GOGoyQWI3OEZJZkN4NWUyMExaeGpPVHcz?= =?utf-8?B?eTl5RVNEZWRlY1RGbVkvb09vbllGUUlvVStad2lCNGhLeVM5QU1qWVgzelZU?= =?utf-8?B?aG1oWnA3MytFUnhtanlJTVhkQzdjMW5rdzNaeWdVNmtuTmV5czM4R25MWmZh?= =?utf-8?B?U3NrSTc2elljM0J6U25yeFBrUG5nTW1HWXB1UDBta0RXcm8yaEw4c3V2SVAv?= =?utf-8?B?cnZRSWo3SmVOeEtlbHZKL3BwQy9FMWFjRU12SHNBVVpGKzJkYUxvT0N3dFZK?= =?utf-8?B?SkYrVmxoZ0wrT0tBR1NmdE5hVHAyTzJ3WGRNV0hFNU9MaUh0eXBaR3gxK1pQ?= =?utf-8?B?d0F2OTBzS2Mrd0l6KzlkRnF0UFlKUnZSRmpPL0pIclErdTJVYXFuRTNwMHpJ?= =?utf-8?B?RWE5QWZiUU5UNmhzWG5uLzZrbFA5UUIrcG5zQnpSNzhBY0NmTVJoY29CVWZL?= =?utf-8?B?dVZvZHRsTE9NZ3ZRRW0rYjE5T1dwcGtZWkkwVy94eU5ZOWY1ck5yR0xBQm1x?= =?utf-8?B?MnZIdjNjdXBURk1VeTR1MlVSNjM1d2ZDbkZibHNqQVB1T0l4VzhGbk5Cc2wr?= =?utf-8?B?SnZiOHAvWXRJd0YxQ1hyWnhWVm9GODU2WXh6Rlk5QXhybW5LUlNBSE9nQXZi?= =?utf-8?B?cmszeDAwbE9kNmtLbm02ekNNQUN1aDhFVXFLblJRdmVwRVRuVCszWE9vVEYv?= =?utf-8?B?bzB6SU1tWXk5RG9IWk5DbWxseFZiMjhET29heGhVZ1Y3MXpGRTZ0KzlVTVp2?= =?utf-8?B?K3dKc0FIU25aMGJ0MmJRcWxCZXNJVnV6anpHMzhpODdxbUxaVEZqUXVFOTFM?= =?utf-8?B?NzdVaElkNVppb1ZPZ0ZCK1U3N0Z2ZS90eFlsQ3RIeG9kNHllWVlic0U3Rmdj?= =?utf-8?B?eCs5bmNqLzFkRkdIY2Vzcng0RndlbVpqanA3RzV1RjRlV0twREZEQTVqUk5V?= =?utf-8?B?Y3V1cHp1a3VSQTBBUmdvZGNTUDZSTnA5d3R1TXJKdHNsK2pZdWh3UnhNSWRt?= =?utf-8?B?YTNaVnNPKytCbUFCb1JkOXRIR2FxdWR2VENGT0gwNzJGZnE3MElFVTdUdnVa?= =?utf-8?B?bUlFME5STUhzb0p1WmpUYW5wc3NnL2hMK3JrQW03OHQ3ZmtPanQzejRRU1FH?= =?utf-8?B?K1VVUWVRT09mdWlya1lFcG5ZSkkxNXU5a0RFNmx4T2pKajNleXFuVE1rM0xG?= =?utf-8?B?U0RTNDMwM1dEYURHaVJiNXY2VnBWbjl5Qjd3UTc0OWtPTFRrNmU1NmFUU29Z?= =?utf-8?B?WEZwdHljbGNpSHhsSy9XWkNRc1BVQzZCcFNPTVc4TUE4TzZPT3FZQldUN3l0?= =?utf-8?B?UUdJZ05CekZMbS95SFp1NjI1ZDBvd2k3VTRxNGtaVVZHbEt5UWdjdTJMRWN6?= =?utf-8?Q?jIoOTE8K8Ha6Rv3fxndl1lzgk6jDJ6IUCf+c1S17LCMS?= Content-Type: text/plain; charset="utf-8" Content-ID: <615E4425DF05664DA79E984A1377D96C@FRAP264.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MR1P264MB2481.FRAP264.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: a0134c16-444a-4079-2809-08db665ae0fa X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jun 2023 06:54:31.0115 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: ee11ccf7-112c-4284-848b-f229745e715b X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: rddGJvESky7l8rMeyYrKjtu4h5DDtxze3hQ7fJxkQToPVoCYqTD5bPIOk+d/HHiY0gWgWddtNYB4//kyR72ST7gP+Snvi6+RN2WACG6horHnhox3okFivoU9ANzwRqt0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR1P264MB2062 X-OriginatorOrg: groupe-cyllene.com X-SPAM-LEVEL: Spam detection results: 0 ARC_SIGNED 0.001 Message has a ARC signature ARC_VALID 0.001 Message has a valid ARC signature AWL -0.030 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain DMARC_MISSING 0.1 Missing DMARC policy SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record T_SCC_BODY_TEXT_LINE -0.01 - Subject: Re: [pve-devel] [PATCH-SERIE pve-access-control/pve-manager/qemu-server] check permissions on local bridge X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Jun 2023 06:55:04 -0000 TGUgbWFyZGkgMDYganVpbiAyMDIzIMOgIDA1OjMyICswMDAwLCBERVJVTUlFUiwgQWxleGFuZHJl IGEgw6ljcml0wqA6DQo+ID4gdG8gaGF2ZSBhdCBsZWFzdCB0aGUgbG9jYWwgYnJpZGdlIEFDTCBw YXRoIChmb3IgdGhlIHpvbmUsIG9yIGZvcg0KPiA+IHRoZQ0KPiA+IHpvbmUgYW5kIHRoZSBicmlk Z2VzPykgaW4gdGhlIHJlZ3VsYXIgQUNMIHNlbGVjdG9ycyBpbiA3LnggYXMgd2VsbCwNCj4gPiBp Zg0KPiA+IHdlIHB1bGwgaW4gc29tZXRoaW5nIGluIHB2ZS1tYW5hZ2VyLCB0aGFuIElNSE8gaXQg c2hvdWxkIGJlIHRoYXQsDQo+ID4gbm90DQo+ID4gdGhlIGZ1bGwtZmxlZ2RlZCBuZXcgcGFuZWxz Lg0KPiBJJ2xsIGxvb2sgdG8gcmV3cm9rIHRoZSBzZWxlY3Rvciwgdm5ldHMgYXJlIG5vdCB5ZXQg ZGlzcGxheWVkLiAob25seQ0KPiBzZG4gem9uZXMsIGFuZCBsb2NhbG5ldHdvcmsgem9uZSBpcyBh bHNvIG5vdCBkaXNwbGF5ZWQgKQ0KDQpMb29raW5nIGF0IHRoYXQsDQpjdXJyZW50bHkgdGhlIHBh dGhzZWxlY3RvciBpcyBmaWxsZWQgZnJvbSBjbHVzdGVyIHJlc3NvdXJjZXMuDQoNCkkgcmVhbGx5 IGRvbid0IGtub3duIGlmIHdlIHdhbnQgdG8gYWRkIGFsbCB2bmV0cyB0byB0aGUgY2x1c3Rlcg0K cmVzc291cmNlcyBhcGkuIChhcyB3ZSBkb24ndCByZWFsbHkgd2FudCB0byBleHBvc2UgdGhlbSBp biB0aGUgdHJlZQ0KYW55d2F5LCAgbGlrZSBhIGRpc2sgZnJvbSBhIGRhdGFzdG9yZSBpcyBub3Qg ZXhwb3NlZC4gVXNlciBjb3VsZCBoYXZlIGENCmxvdCBicmlkZ2VzLCBhbmQgdGhlIHJlc3NvdXJj ZSBqc29uIGNhbiBiZSBhbHJlYWR5IGJpZykNCg0KVXNlciBjb3VsZCBzdGlsbCBhZGQgbWFudWFs bHkgdGhlIGJyaWRnZSBpbiB0aGUgcGF0aCBpZiBuZWVkZWQuDQoNClVzZXIgY291bGQgc3RpbGwg dXNlIHRoZSBuZXcgcGFuZWwgZm9yIGVhc3kgYWRkIG1vcmUgZ3JhbnVsYXINCnBlcm1pc3Npb25z IG9uIGJyaWRnZS92bGFuLg0KDQo/DQoNCg0KDQoNCg==