Skip to content
  • Corey Bryant's avatar
    Add basic version of bridge helper · 7b93fadf
    Corey Bryant authored
    
    
    This patch adds a helper that can be used to create a tap device attached to
    a bridge device.  Since this helper is minimal in what it does, it can be
    given CAP_NET_ADMIN which allows qemu to avoid running as root while still
    satisfying the majority of what users tend to want to do with tap devices.
    
    The way this all works is that qemu launches this helper passing a bridge
    name and the name of an inherited file descriptor.  The descriptor is one
    end of a socketpair() of domain sockets.  This domain socket is used to
    transmit a file descriptor of the opened tap device from the helper to qemu.
    
    The helper can then exit and let qemu use the tap device.
    
    Signed-off-by: default avatarAnthony Liguori <aliguori@us.ibm.com>
    Signed-off-by: default avatarRicha Marwaha <rmarwah@linux.vnet.ibm.com>
    Signed-off-by: default avatarCorey Bryant <coreyb@linux.vnet.ibm.com>
    Signed-off-by: default avatarAnthony Liguori <aliguori@us.ibm.com>
    7b93fadf