public inbox for pve-devel@lists.proxmox.com
 help / color / mirror / Atom feed
* [pve-devel] [PATCH container/manager v3 0/2] add a deny-write option for device passthrough
@ 2024-09-09 12:50 Filip Schauer
  2024-09-09 12:50 ` [pve-devel] [PATCH container v3 1/2] add " Filip Schauer
  2024-09-09 12:50 ` [pve-devel] [PATCH manager v3 2/2] ui: lxc: add readonly " Filip Schauer
  0 siblings, 2 replies; 5+ messages in thread
From: Filip Schauer @ 2024-09-09 12:50 UTC (permalink / raw)
  To: pve-devel

Add the deny-write options for device passthrough, to restrict container
access to devices.

This allows for passing through a device in read-only mode without
giving the container full access to it.

Up until now a container with a device passed through to it was granted
full access to that device without an option to restrict that access as
pointed out by @Fiona.

Changes since v1:
* set default values for deny_read & deny_write
* remove the deny_read checkbox from the UI, since it is expected to
  only have a very niche use case.

Changes since v2:
* remove the deny_read option due to a lack of use-cases
* rename deny_write to deny-write

pve-container:

Filip Schauer (1):
  add deny-write option for device passthrough

 src/PVE/LXC.pm        | 7 ++++++-
 src/PVE/LXC/Config.pm | 6 ++++++
 2 files changed, 12 insertions(+), 1 deletion(-)


pve-manager:

Filip Schauer (1):
  ui: lxc: add readonly option for device passthrough

 www/manager6/lxc/DeviceEdit.js | 8 ++++++++
 1 file changed, 8 insertions(+)


Summary over all repositories:
  3 files changed, 20 insertions(+), 1 deletions(-)

-- 
Generated by git-murpp 0.6.0


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2024-10-24 17:23 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2024-09-09 12:50 [pve-devel] [PATCH container/manager v3 0/2] add a deny-write option for device passthrough Filip Schauer
2024-09-09 12:50 ` [pve-devel] [PATCH container v3 1/2] add " Filip Schauer
2024-09-10 14:36   ` [pve-devel] applied: " Thomas Lamprecht
2024-09-09 12:50 ` [pve-devel] [PATCH manager v3 2/2] ui: lxc: add readonly " Filip Schauer
2024-10-24 17:23   ` [pve-devel] applied: " Thomas Lamprecht

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
Service provided by Proxmox Server Solutions GmbH | Privacy | Legal