[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v2 08/11] authz: add QAuthZList object type for
From: |
Markus Armbruster |
Subject: |
Re: [Qemu-devel] [PATCH v2 08/11] authz: add QAuthZList object type for an access control list |
Date: |
Thu, 21 Jun 2018 18:36:19 +0200 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) |
Daniel P. Berrangé <address@hidden> writes:
> On Thu, Jun 21, 2018 at 10:28:23AM -0500, Eric Blake wrote:
>> On 06/15/2018 10:42 AM, Daniel P. Berrangé wrote:
>> > From: "Daniel P. Berrange" <address@hidden>
>> >
>> > Add a QAuthZList object type that implements the QAuthZ interface. This
>> > built-in implementation maintains a trivial access control list with a
>> > sequence of match rules and a final default policy. This replicates the
>> > functionality currently provided by the qemu_acl module.
>> >
>>
>> >
>> > It is not currently possible to create this via -object, since there is
>> > no syntax supported to specify non-scalar properties for objects. This
>> > is likely to be addressed by later support for using JSON with -object,
>> > or an equivalent approach.
>>
>> Is this statement slightly stale, since we have JSON support with --object
>> already?
>
> That's news to me if we do. Markus did a PoC but AFAIK it was never
> proposed for merge so far.
Correct. Can finish the job if there's a need.
[...]
- [Qemu-devel] [PATCH v2 01/11] util: add helper APIs for dealing with inotify in portable manner, (continued)
- [Qemu-devel] [PATCH v2 01/11] util: add helper APIs for dealing with inotify in portable manner, Daniel P . Berrangé, 2018/06/15
- [Qemu-devel] [PATCH v2 06/11] authz: add QAuthZ object as an authorization base class, Daniel P . Berrangé, 2018/06/15
- [Qemu-devel] [PATCH v2 05/11] hw/usb: switch MTP to use new inotify APIs, Daniel P . Berrangé, 2018/06/15
- [Qemu-devel] [PATCH v2 07/11] authz: add QAuthZSimple object type for easy whitelist auth checks, Daniel P . Berrangé, 2018/06/15
- [Qemu-devel] [PATCH v2 09/11] authz: add QAuthZListFile object type for a file access control list, Daniel P . Berrangé, 2018/06/15
- [Qemu-devel] [PATCH v2 08/11] authz: add QAuthZList object type for an access control list, Daniel P . Berrangé, 2018/06/15
[Qemu-devel] [PATCH v2 10/11] authz: add QAuthZPAM object type for authorizing using PAM, Daniel P . Berrangé, 2018/06/15
[Qemu-devel] [PATCH v2 11/11] authz: delete existing ACL implementation, Daniel P . Berrangé, 2018/06/15