Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Problem with usb-passthrough using libvirt with hardened-sources-3.15.8
Date: Tue, 16 Sep 2014 12:34:54
Message-Id: 6303e0992da6c11e2ffe27fa8bb52603.squirrel@atoth.sote.hu
In Reply to: [gentoo-hardened] Problem with usb-passthrough using libvirt with hardened-sources-3.15.8 by "Marcin Mirosław"
1 2014.Szeptember 16.(K) 11:05 időpontban Marcin Mirosław ezt írta:
2 > A few days ago I boot KVM host with hardened kernel. After some time I
3 > noticed that usb passthrough from host to kvm guest doesn't work. Simply
4 > sayoing guest didn't seen any usb device. After switching kernel on host
5 > to gentoo-sources-{3.14.14,3.16.2} usb-passthrough works as I expect. I
6 > didn't any related information in logs.
7 > Does libvirt or grsec need special configuration to have such feature
8 > working?
9
10 I don't use KVM or libvirt, but I would suggest to check out your grsec
11 logs for denials.
12 Also there is a new capability introduced not so long ago:
13 CAP_BLOCK_SUSPEND
14 Some daemons and executables may complain - but in my case were
15 functioning properly anyways. May be not related to your problem.
16
17 BR: Dw.
18 --
19 dr Tóth Attila, Radiológus, 06-20-825-8057
20 Attila Toth MD, Radiologist, +36-20-825-8057
21
22
23 --
24 dr Tóth Attila, Radiológus, 06-20-825-8057
25 Attila Toth MD, Radiologist, +36-20-825-8057

Replies