From: Alex Williamson Date: Wed, 12 May 2010 13:46:31 +0000 (-0400) Subject: KVM: remove CAP_SYS_RAWIO requirement from kvm_vm_ioctl_assign_irq X-Git-Url: https://git.karo-electronics.de/?a=commitdiff_plain;h=48bb09eee4e102544808c00f43bc40a4a2e43e50;p=linux-beck.git KVM: remove CAP_SYS_RAWIO requirement from kvm_vm_ioctl_assign_irq Remove this check in an effort to allow kvm guests to run without root privileges. This capability check doesn't seem to add any security since the device needs to have already been added via the assign device ioctl and the io actually occurs through the pci sysfs interface. Signed-off-by: Alex Williamson Signed-off-by: Marcelo Tosatti --- diff --git a/virt/kvm/assigned-dev.c b/virt/kvm/assigned-dev.c index 4d10b1e047f4..64672e2d43c3 100644 --- a/virt/kvm/assigned-dev.c +++ b/virt/kvm/assigned-dev.c @@ -448,9 +448,6 @@ static int kvm_vm_ioctl_assign_irq(struct kvm *kvm, struct kvm_assigned_dev_kernel *match; unsigned long host_irq_type, guest_irq_type; - if (!capable(CAP_SYS_RAWIO)) - return -EPERM; - if (!irqchip_in_kernel(kvm)) return r;