Changeset ad897739

Timestamp:

04/10/2023 10:30:10 PM (13 months ago)

Author:

Thomas Trepl <thomas@…>

Branches:

multilib

Children:

eac5d6f

Parents:

70617e8 (diff), a4b0c6d (diff)
Note: this is a merge changeset, the changes displayed below correspond to the merge itself.
Use the (diff) links above to see all the changes relative to each parent.

Message:

Automatic merge of trunk into multilib

Location:

chapter08

Files:

• eudev.xml (modified) (2 diffs)
• systemd.xml (modified) (2 diffs)

chapter08/eudev.xml

@@ -40 +40 @@
   <sect2 role="installation">
     <title>Installation of Eudev</title>
-
-    
 
     <para>First fix the location of udev rules in the .pc file:</para>
@@ -158 +156 @@
 
     <indexterm zone="conf-eudev">
+      <primary sortas="e-/etc/udev/rules.d/65-kvm.rules">/etc/udev/rules.d/65-kvm.rules</primary>
+    </indexterm>
+
+    <para>
+      The default udev rule installed by Eudev would allow all users to
+      access <filename class='devicefile'>/dev/kvm</filename>.  The editors
+      consider it dangerous.  Create a configuration file to override it:
+    </para>
+
+<screen><userinput remap="configure">cat > /etc/udev/rules.d/65-kvm.rules &lt;&lt; "EOF"
+<literal>KERNEL=="kvm", GROUP="kvm", MODE="0660", TAG+="uaccess"</literal>
+EOF</userinput></screen>
+
+    <indexterm zone="conf-eudev">
       <primary sortas="e-/etc/udev/hwdb.bin">/etc/udev/hwdb.bin</primary>
     </indexterm>

chapter08/systemd.xml

@@ -67 +67 @@
       -Dmode=release                \
       -Dpamconfdir=no               \
+      -Ddev-kvm-mode=0660           \
       -Ddocdir=/usr/share/doc/systemd-&systemd-version; \
       ..</userinput></screen>
@@ -166 +167 @@
           <para>Prevent the installation of a PAM configuration file not
           functional on LFS.</para>
+        </listitem>
+      </varlistentry>
+
+      <varlistentry>
+        <term><parameter>-Ddev-kvm-mode=0660</parameter></term>
+        <listitem>
+          <para>The default udev rule would allow all users to access
+          <filename class='devicefile'>/dev/kvm</filename>.  The editors
+          consider it dangerous.  This option overrides it.</para>
         </listitem>
       </varlistentry>