From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id 306301FF162 for <inbox@lore.proxmox.com>; Mon, 7 Apr 2025 12:08:39 +0200 (CEST) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id 0DD0F3AFB4; Mon, 7 Apr 2025 12:08:36 +0200 (CEST) Message-ID: <a303e4d1-a118-4b81-a177-9c4c8b3fff3d@proxmox.com> Date: Mon, 7 Apr 2025 12:08:31 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: Thomas Lamprecht <t.lamprecht@proxmox.com>, Proxmox VE development discussion <pve-devel@lists.proxmox.com>, =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com>, Gabriel Goller <g.goller@proxmox.com> References: <20250404162908.563060-1-g.goller@proxmox.com> <20250404162908.563060-26-g.goller@proxmox.com> <9c5f591e-bf2d-4c99-ad28-02ee58bbc222@proxmox.com> <1744010542.6a4j1ll8ij.astroid@yuna.none> <ec1776b0-1a8b-45fd-bbf5-d3c96b90016b@proxmox.com> <50c0c55b-834c-4f73-b046-898584a075d5@proxmox.com> <dfbc849d-ac72-4dfb-89d5-b36a24ab71cc@proxmox.com> Content-Language: en-US From: Stefan Hanreich <s.hanreich@proxmox.com> In-Reply-To: <dfbc849d-ac72-4dfb-89d5-b36a24ab71cc@proxmox.com> X-SPAM-LEVEL: Spam detection results: 0 AWL 0.667 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record Subject: Re: [pve-devel] [PATCH pve-access-control v2 1/1] permissions: add ACL paths for SDN fabrics X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> CgpPbiA0LzcvMjUgMTE6MzQsIFRob21hcyBMYW1wcmVjaHQgd3JvdGU6Cj4gQW0gMDcuMDQuMjUg dW0gMTA6NTEgc2NocmllYiBTdGVmYW4gSGFucmVpY2g6Cj4+IE9uIDQvNy8yNSAxMDoxMiwgVGhv bWFzIExhbXByZWNodCB3cm90ZToKPj4+IEFtIDA3LjA0LjI1IHVtIDA5OjI0IHNjaHJpZWIgRmFi aWFuIEdyw7xuYmljaGxlcjoKPj4+PiBPbiBBcHJpbCA0LCAyMDI1IDc6MjAgcG0sIFRob21hcyBM YW1wcmVjaHQgd3JvdGU6Cj4+Pj4+IFNvLCB3aXRob3V0IGxvb2tpbmcgYXQgdGhlIGltcGxlbWVu dGF0aW9uLCBmYWJyaWNzIGhhdmUgdGhlIElEcyB1bmlxdWUKPj4+Pj4gcGVyIHN1Yi10eXBlPyBD b3VsZCBtYXliZSBhbHNvIHNoYXJlIGFuIElEIHNwYWNlLCBsZXNzIGNvbmZ1c2lvbgo+Pj4+PiBw b3RlbnRpYWwsIGJ1dCBuYXR1cmFsbHkgYWxzbyBsZXNzIGZsZXhpYmlsaXR5IOKAkyB3aGF0IGRv IHlvdSB0aGluaz8KPj4+Pgo+Pj4+IHRoZXkgc2hhcmUgYSBzZWN0aW9uIGNvbmZpZyAoYW5kIHRo dXMgSUQtc3BhY2UpLCBzbyBJIGd1ZXNzIHdlIGNvdWxkCj4+Cj4+IFRoZXJlJ3Mgb25lIHNlY3Rp b24gY29uZmlnIGZpbGUgcGVyIGZhYnJpYywgc28gaXRzIElEIGlzIHVuaXF1ZSBwZXIKPj4gcHJv dG9jb2wuIFdlJ2QgbmVlZCB0byBsb2FkICphbGwqIGNvbmZpZ3VyYXRpb24gZmlsZXMgZXZlcnl0 aW1lIHdlCj4+IGNoYW5nZSBvbmUgY29uZmlndXJhdGlvbiBmaWxlIChhdCBsZWFzdCB3aGVuIGFk ZGluZyBhIGZhYnJpYykgc28gd2UgY2FuCj4+IHZhbGlkYXRlIHVuaXF1ZSBJRHMgYWNyb3NzIGFs bCBmYWJyaWMgdHlwZXMuCj4gCj4gSSBmYWludGx5IHJlbWVtYmVyIHNvbWUgbHVuY2ggdGFsa3Ms IGJ1dCB3aGF0IHdhcyB0aGUgc3RvcnkgYmVoaW5kIHRoZQo+IHBlciB0eXBlIGNvbmZpZ3MgYWdh aW4/IFRoZSBwZXItbm9kZSBtYXBwaW5ncz8KClNvcnJ5LCBkaWRuJ3Qgc2VlIHRoaXMgZW1haWwg YmVmb3JlIHNlbmRpbmcgdGhlIHJlcGx5IHRvIEZhYmlhbjoKCk1vc3RseSB0aGUgZGlzanVuY3Qg YXR0cmlidXRlcyBpbiB0aGUgZmFicmljIHNlY3Rpb24sIGFzIHdlbGwgYXMgdGhlCmludGVyZmFj ZSBrZXkgb2YgdGhlIG5vZGUgc2VjdGlvbi4gT1NQRiBhbmQgT3BlbkZhYnJpYyBhcmUgcmVsYXRp dmVseQpzaW1pbGFyLCBvbmx5IGRpZmZlcmluZyBpbiBzb21lIHByb3RvY29sIHBhcmFtZXRlcnMu IEJHUCBhbmQgV2lyZWd1YXJkCnByb2JhYmx5IGRpdmVyZ2UgZXZlbiBtb3JlIGFuZCB3ZSB3YW50 ZWQgdG8gYXZvaWQgbWl4aW5nIHRvbyBtYW55CmRpc3NpbWlsYXIgc2VjdGlvbnMuCgpUaGlua2lu ZyBtb3JlIGFib3V0IGl0LCBJIHRoaW5rIHdlIG1pZ2h0IGhhdmUgdW5kZXJleHBsb3JlZCBqdXN0 IHB1dHRpbmcKZXZlcnkgdHlwZSBpbnRvIG9uZSBjb25maWd1cmF0aW9uIGZpbGUgKGFzIGlzIHRo ZSBjYXNlIHdpdGggem9uZXMgb3IKY29udHJvbGxlcnMgZm9yIGluc3RhbmNlKS4gSSBkb24ndCB0 aGluayBpdCBzaG91bGQgYmUgdG9vIGhhcmQgdG8gY2hhbmdlCnRob3VnaCB3aXRoIHRoZSBjdXJy ZW50IGltcGxlbWVudGF0aW9uLgoKPiBDYW4geW91IHBvc3Qgc29tZSBzYW1wbGUgY29uZmlncyBm b3IgbXkgY29udmVuaWVuY2UsIG9yIHBvaW50IHRvIHRoZW0KPiBpZiB0aGVzZSBwYXRjaGVzIGhl cmUgY29udGFpbiBzb21lIChlLmcuLCBmb3IgdGVzdGluZyksIHNvIHRoYXQgSSAob3IKPiBzb21l b25lIG90aGVyIGNvcmUgbWFpbnRhaW5lcikgY2FuIHRha2UgYSBjbG9zZXIgbG9vayBhdCB0aGlz IHBhcnQuCgpUaGVyZSBhcmUgc29tZSBpbiB0aGUgaW50ZWdyYXRpb24gdGVzdHMgb2YgcHJveG1v eC1wZXJsLXJzLCBhcyB3ZWxsIGFzCmluIHRoZSBwdmUtbmV0d29yayBpbnRlZ3JhdGlvbiB0ZXN0 cywgYnV0IGhlcmUgdGhleSBhcmUgZm9yIHlvdXIKY29udmVuaWVuY2UgKHRha2VuIGZyb20gbXkg dGVzdCBjbHVzdGVyKToKCgokIGNhdCAvZXRjL3B2ZS9zZG4vZmFicmljcy9vcGVuZmFicmljLmNm ZwoKZmFicmljOiBldnBuCgloZWxsb19pbnRlcnZhbCAxCglsb29wYmFja19wcmVmaXggMTcyLjIw LjMwLjAvMjQKCm5vZGU6IGV2cG5fZGVhZGV5ZQoJZmFicmljX2lkIGV2cG4KCWludGVyZmFjZXMg bmFtZT1lbnMxOSxpcD0xNzIuMTYuMy4xMC8zMQoJbm9kZV9pZCBkZWFkZXllCglyb3V0ZXJfaWQg MTcyLjIwLjMwLjEKCm5vZGU6IGV2cG5fcGF0aGZpbmRlcgoJZmFicmljX2lkIGV2cG4KCWludGVy ZmFjZXMgbmFtZT1lbnMxOSxpcD0xNzIuMTYuMy4yMC8zMQoJbm9kZV9pZCBwYXRoZmluZGVyCgly b3V0ZXJfaWQgMTcyLjIwLjMwLjIKCgokIGNhdCAvZXRjL3B2ZS9zZG4vZmFicmljcy9vc3BmLmNm ZwpmYWJyaWM6IGNlcGgKCWFyZWEgMTIzCglsb29wYmFja19wcmVmaXggMTcyLjIwLjMuMC8yNAoK bm9kZTogY2VwaF9kZWFkZXllCglmYWJyaWNfaWQgY2VwaAoJaW50ZXJmYWNlcyBuYW1lPWVuczIw LHVubnVtYmVyZWQ9dHJ1ZQoJaW50ZXJmYWNlcyBuYW1lPWVuczIxLHVubnVtYmVyZWQ9dHJ1ZQoJ bm9kZV9pZCBkZWFkZXllCglyb3V0ZXJfaWQgMTcyLjIwLjMuMQoKbm9kZTogY2VwaF9wYXRoZmlu ZGVyCglmYWJyaWNfaWQgY2VwaAoJaW50ZXJmYWNlcyBuYW1lPWVuczIwLHVubnVtYmVyZWQ9dHJ1 ZQoJaW50ZXJmYWNlcyBuYW1lPWVuczIxLHVubnVtYmVyZWQ9dHJ1ZQoJbm9kZV9pZCBwYXRoZmlu ZGVyCglyb3V0ZXJfaWQgMTcyLjIwLjMuMgoKbm9kZTogY2VwaF9yYWlkZXIKCWZhYnJpY19pZCBj ZXBoCglpbnRlcmZhY2VzIG5hbWU9ZW5zMjAsdW5udW1iZXJlZD10cnVlCglpbnRlcmZhY2VzIG5h bWU9ZW5zMjEsdW5udW1iZXJlZD10cnVlCglub2RlX2lkIHJhaWRlcgoJcm91dGVyX2lkIDE3Mi4y MC4zLjMKCgo+PiBTaW5jZSB3ZSBoYXZlIHBsYW5zIG9mIG1vdmluZyBvdmVyIHRoZSBleGlzdGlu ZyBJUy1JUyArIEJHUCBjb250cm9sbGVycywKPj4gYXMgd2VsbCBhcyBhIG5ldyBXaXJlR3VhcmQg ZmFicmljLCB3ZSdkIGhhdmUgdG8gbG9hZCBhbmQgcGFyc2UgNQo+PiBkaWZmZXJlbnQgY29uZmln dXJhdGlvbiBmaWxlcyBmb3IgY3Jvc3MtdmFsaWRhdGlvbiB0aGVuLgo+Pgo+Pj4gSG1tLCBvayBu byByZWFsIHZhbHVlIGZvciBhbGxvd2luZyBhIHVzZXIgdXNlLWFjY2VzcyBvbiBzdWNoIGEgZmFi cmljCj4+PiAoZm9yIG5vdyksIGFuZCBub3Qgc3VyZSBpZiBpdCBpcyB1c2VmdWwgdG8gYWxsb3cg Y2VydGFpbiBhZG1pbnMgdG8gY3JlYXRlCj4+PiBhbiBvcGVuZmFicmljIGZhYnJpYyBidXQgbm90 IGFuIG9zcGYgb25lIChpZiB0aGUgaW1wbGVtZW50YXRpb24gZXZlbgo+Pj4gdXNlcyBzdWNoIGZp bmUtZ3JhaW5lZCBjaGVja3MpCj4+Cj4+IEkgdGhpbmsgdGhhdCBpbiBwcmFjdGljZSwgYWRtaW5z IHdvdWxkIGNyZWF0ZSB0aGUgZmFicmljcyBhbmQgdGhlbiBvbmx5Cj4+IGhhbmQgb3V0IHBlcm1p c3Npb25zIHRvIGVkaXQgdGhhdCBzcGVjaWZpYyBmYWJyaWMsIHdpdGhvdXQgaGFuZGluZyBvdXQK Pj4gdGhlIHBlcm1pc3Npb25zIHRvIGNyZWF0ZSBmYWJyaWNzIGF0IGFsbC4KPj4KPj4gSXQgbWln aHQgbWFrZSBzZW5zZSBmb3IgV2lyZWd1YXJkICh3aGVyZSB0aGUgcG9zc2libGUgaW1wbGljYXRp b25zCj4+IGFyZW4ndCBuZWFybHkgYXMgYmFkIGFzIHdpdGggZS5nLiBCR1ApLCBidXQgZXZlbiB0 aGVuIEkgdGhpbmsgbXkKPj4gcHJldmlvdXMgcG9pbnQgYXBwbGllcyB0aGF0IHlvdSBwcm9iYWJs eSBkb24ndCB3YW50IHRvIGhhbmQgb3V0IGJsYW5rZXQKPj4gcGVybWlzc2lvbnMgZm9yIGEgd2hv bGUgc3VidHlwZSwgaW4gY2FzZSB5b3Ugd2FudCB0byBtYWtlIGhlYXZ5IHVzZSBvZiBBQ0xzLgo+ Pgo+PiBUaGUgY3VycmVudCBzY2hlbWEgaXMgbW9yZSBvZiBhIGRpcmVjdCByZXN1bHQgb2YgaG93 IHRoZSBzZWN0aW9uIGNvbmZpZwo+PiBpcyBzdHJ1Y3R1cmVkLCBzaW5jZSBJRHMgY2FuIGJlIGR1 cGxpY2F0ZWQgYWNyb3NzIGRpZmZlcmVudCBwcm90b2NvbHMsCj4+IHNvIHlvdSBuZWVkIHRoZSBh ZGRpdGlvbmFsIGRpc3Rpbmd1aXNoZXIgaW4gdGhlIEFDTCBwYXRoLgo+IAo+IFdpdGggdGhlIGNv bmZpZ3MgeW91IGRlc2NyaWJlIGl0IHByb2JhYmx5IGluZGVlZCBtYWtlIHNlbnNlIHRvIGhhdmUK PiBwZXItdHlwZSBBQ0wgYmFzZSBwYXRocywgdGhhdCBzYWlkLCBJJ2QgbGlrZSB0byByZXZpc2l0 IHRoZSBkZXNpZ24KPiBhZ2FpbiB3aXRoIG1vcmUgdGltZSBhdCBoYW5kOyBJTU8gdGhpcyBpcyBh IGJpdCB0byBzaG9ydCBub3RpY2UgYW5kCj4gdG8gYmlnIGJhZ3MgdG8gaG9sZCBmb3IgdXMgdG8g cnVzaCBpdCBpbiBub3cuCgpZZXMsIEkgYWdyZWUgdGhhdCB3ZSBzaG91bGRuJ3QgcnVzaCB0aGlz LiBJJ3ZlIHRob3VnaHQgYWJvdXQgdGhpcwpleHRlbnNpdmVseSB0b2RheSAoYW5kIHRoZSB3ZWVr ZW5kIGZvciB0aGF0IG1hdHRlcikgYW5kIHdhbnRlZCB0byB0YWxrCnRvIHlvdSBhYm91dCBpdCB0 b2RheSBhbnl3YXkuCgpBZnRlciBzb21lIGNvbnNpZGVyYXRpb24gSSBzdHJvbmdseSBkcmlmdGVk IHRvd2FyZHMgbm90IGluY2x1ZGluZyBpdC4KV2hpbGUgSSB0aGluayB0aGlzIGlzIGZ1bmN0aW9u YWxseSBpbiBhIGRlY2VudCBzaGFwZSBhbmQgSSAqcmVhbGx5Kgp3YW50ZWQgdG8gZ2V0IHRoaXMg cmVhZHksIEkgdGhpbmsgd2Ugc2hvdWxkIHRha2UgbW9yZSB0aW1lIHRvIGNhcmVmdWxseQpjb25z aWRlciBhbmQgZXZhbHVhdGUgdGhlIHVuZGVybHlpbmcgZGVzaWduLiBUaGlzIGlzIGEgZnVuZGFt ZW50YWwKYnVpbGRpbmcgYmxvY2sgLSBwYXJ0aWN1bGFybHkgbG9va2luZyBhdCBmdXJ0aGVyIFBE TSBpbnRlZ3JhdGlvbnMsIHNvIHdlCm5lZWQgdG8gbWFrZSBzdXJlIHRvIGdldCB0aGlzIHJpZ2h0 LiBJIGRvbid0IHRoaW5rIHdlIGNhbiBtYW5hZ2UgdG8gZG8KdGhpcyBwcm9wZXJseSBpbiBhIHRp bWVseSBmYXNoaW9uLCBhbmQgSSBkb24ndCB0aGluayB0aGlzIHBhdGNoIHNlcmllcwpyZWNlaXZl ZCB0aGUgc2NydXRpbnkgaXQgc2hvdWxkIGdpdmVuIHRoZSBpbXBvcnRhbmNlIGFuZCBzaXplLgoK PiBBcyBvZiBub3cgSSdkIHByZXR0eSBjZXJ0YWluIHRoYXQgSSdsbCBvbmx5IGdldCBhcm91bmQg dGFraW5nIGEKPiBjbG9zZXIgbG9vayBwb3N0IHJlbGVhc2VzLCBzbyB0aGlzIG1pZ2h0IGJlIHBy b2JhYmx5IGJlIGEgYmV0dGVyIGZpdAo+IGZvciB0aGUgbmV4dCBtYWpvciByZWxlYXNlIGluIGEg dHdvIHRvIHRocmVlIG1vbnRocy4gT3Igd291bGQgeW91Cj4gcHJlZmVyIGdldHRpbmcgdGhpcyBp biBub3cgdG8gYWNxdWlyZSBmZWVkYmFjayBidXQgdGhlbiBoYXZpbmcgdG8KPiBwb3RlbnRpYWxs eSByZXdvcmsgdGhlIGNvbmZpZy9hY2wgaW5jbHVkaW5nIG1pZ3JhdGlvbnMgaW4gYSBiaWdnZXIK PiB3YXk/IFNsYXBwaW5nIHNvbWUgdGVjaC1wcmV2aWV3IGxhYmVsIG9uIGl0IG1pZ2h0IHNldCBl eHBlY3RhdGlvbnMKPiByb3VnaGx5IHJpZ2h0IGZvciB1c2VycyBpbiB0aGF0IGNhc2UuIEkgY2Fu bm90IGdpdmUgeW91IGEgcHJvbWlzZQo+IGhlcmUgYnV0IGlmIHlvdSB0aGluayBpdCBzaG91bGQg Z28gaW4gYW5kIHByb21pc2UgbWUgdG8gd29yayBvbgo+IHN1Y2ggYSB0cmFuc2Zvcm1hdGlvbiB0 aGVuIEkgd2lsbCBzZXQgc29tZSB0aW1lIGFzaWRlIHRvIHRha2UgYQo+IHNlcmlvdXMgbG9vayB0 b2RheS4gQnV0IHBsZWFzZSBjb25zaWRlciB3aGV0aGVyIGEgbmV3IGZlYXR1cmUgYXQKPiB0aGUg ZW5kIG9mIHRoZSBuZXcgZmVhdHVyZSByZWxlYXNlIGN5Y2xlIGlzIHdvcnRoIHRoZSBlZmZvcnQg Zm9yCj4gYWxsIG9mIHVzLiAKCkkgdGhpbmsgdGhpcyBtaWdodCBiZSBmb3IgdGhlIGJldHRlciwg dGhpcyBhbHNvIGhhcyB0aGUgcG90ZW50aWFsIHRvCmFmZmVjdCBleGlzdGluZyBFVlBOIHNldHVw cyBhcyB3ZWxsIHdpdGggdGhlIHJlZmFjdG9yaW5nIHBvcnRpb25zLiBTbwphcGFydCBmcm9tIGRp c2N1c3NpbmcgdGhlIGRlc2lnbiBvZiB0aGUgaW1wbGVtZW50YXRpb24sIGZ1cnRoZXIKZXh0ZW5z aXZlIHRlc3Rpbmcgd291bGQgYWxzbyBiZSB3YXJyYW50ZWQgaW1vIChhcyBldmlkZW5jZWQgYnkK RnJpZWRyaWNoJ3MgcmVwb3J0IHRvZGF5KS4KCgo+IEEgc2lkZS1iZW5lZml0IG9mIHdhaXRpbmcg bWlnaHQgYmUgdGhhdCB5b3UgZ2V0IGFyb3VuZCB0byBhbHNvCj4gbW92ZSBiZ3AgYW5kIGlzLWlz IG92ZXIgdG9vIHVudGlsIHRoZW4sIGVuc3VyaW5nIHRoZSBjb25maWcvYXBpCj4gZGVzaWduIGlz IHJlYWxseSBhIGdvb2QgZml0IGZvciB0aGF0IHRvby4KCkkgdGhpbmsgc28gYXMgd2VsbCwgc2Ft ZSBnb2VzIGZvciBhIHBvdGVudGlhbCBXaXJlZ3VhcmQgaW50ZWdyYXRpb24uCgoKX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KcHZlLWRldmVsIG1haWxpbmcg bGlzdApwdmUtZGV2ZWxAbGlzdHMucHJveG1veC5jb20KaHR0cHM6Ly9saXN0cy5wcm94bW94LmNv bS9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHZlLWRldmVsCg==