Re: [Qemu-devel] [PATCH 4/4] Add support for -net bridge

[Anthony Liguori]

David Woodhouse wrote:
> On Tue, 2009-11-03 at 18:28 -0600, Anthony Liguori wrote:
>   
> > The most common use of -net tap is to connect a tap device to a bridge.  This
> > requires the use of a script and running qemu as root in order to allocate a
> > tap device to pass to the script. 
> >     
>
> Does it?
>
> Tap devices can be created (and configured) in advance, and can be
> chowned so that they can be opened by an otherwise unprivileged user (or
> group).

But that requires prior administrative access.

>  You don't need root privileges to use a tap device.
>   

You can access a preconfigured tap device but you cannot allocate a tap 
device and connect it to a bridge without CAP_NET_ADMIN.

Regards,

Anthony Liguori