Package: kvm
Version: 14-1
Severity: normal

A recent patch[1] to the kernel that was included in 2.6.18 and more
recent kernels changes the necessary privileges for creating a tun
devices from having write access to the device to having the
CAP_NET_ADMIN capability.  This causes the ioctl() at qemu/vl.c:3270
to fail due to insufficient privileges (any chance there could be a
perror() here so users know why it failed?) when run as non-root
users.

There have been suggestions[2] to use tunctl (in the uml-utilities
package) to create the interface before running qemu/kvm, and other
suggestions[3] to use setfcaps to set the capabilities on the qemu/kvm
binary to include CAP_NET_ADMIN (not sure what the Debian plans are on
that front).  Of course, there is also always the solution of just
biting the bullet and running kvm/qemu as root...

Anyway, what this bug is really just to suggest that this failure be
documented somewhere (man page or README.Debian preferably) to save
users some debugging to find out all of this information.  But, if you
find a fix, that would be even better.  ;)

Cheers,
Kevin

1.  http://www.mail-archive.com/netdev@vger.kernel.org/msg14319.html
2.  http://www.mail-archive.com/arch@archlinux.org/msg08382.html
3.  http://www.friedhoff.org/fscaps.html#Qemu
-- Package-specific info:


selected information from lshal(1):

  system.product = '2613ESU ThinkPad T60p'  (string)
  system.vendor = 'LENOVO'  (string)
  smbios.chassis.type = 'Notebook'  (string)
  smbios.chassis.manufacturer = 'LENOVO'  (string)
  smbios.system.uuid = 'E9FD2C01-485E-11CB-B762-A1A0A74975E0'  (string)
  smbios.system.serial = 'L3A4175'  (string)
  smbios.system.version = 'ThinkPad T60p'  (string)
  smbios.system.product = '2613ESU'  (string)
  smbios.system.manufacturer = 'LENOVO'  (string)
  smbios.bios.release_date = '11/10/2006'  (string)
  smbios.bios.version = '79ETC3WW (2.03 )'  (string)
  smbios.bios.vendor = 'LENOVO'  (string)


/proc/cpuinfo:

processor       : 0
vendor_id       : GenuineIntel
cpu family      : 6
model           : 14
model name      : Genuine Intel(R) CPU           T2500  @ 2.00GHz
stepping        : 8
cpu MHz         : 2000.000
cache size      : 2048 KB
physical id     : 0
siblings        : 2
core id         : 0
cpu cores       : 2
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx constant_tsc pni monitor 
vmx est tm2 xtpr
bogomips        : 3993.50

processor       : 1
vendor_id       : GenuineIntel
cpu family      : 6
model           : 14
model name      : Genuine Intel(R) CPU           T2500  @ 2.00GHz
stepping        : 8
cpu MHz         : 2000.000
cache size      : 2048 KB
physical id     : 0
siblings        : 2
core id         : 1
cpu cores       : 2
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
coma_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid level     : 10
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe nx constant_tsc pni monitor 
vmx est tm2 xtpr
bogomips        : 3990.04




-- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/dash
Kernel: Linux 2.6.18.20070225a
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)

Versions of packages kvm depends on:
ii  adduser  3.102                           Add and remove users and groups
ii  bridge-u 1.2-1                           Utilities for configuring the Linu
ii  iproute  20061002-3                      Professional tools to control the 
ii  libasoun 1.0.13-1                        ALSA library
ii  libc6    2.3.6.ds1-11                    GNU C Library: Shared libraries
ii  libsdl1. 1.2.11-7                        Simple DirectMedia Layer
ii  libuuid1 1.39+1.40-WIP-2006.11.14+dfsg-1 universally unique id library
ii  zlib1g   1:1.2.3-13                      compression library - runtime

Versions of packages kvm recommends:
ii  kvm-source 14-1                          Source for the KVM driver
ii  linux-imag 2.6.18.20070225a-10.00.Custom Linux kernel binary image for vers
ii  qemu       0.8.2-4                       fast processor emulator
pn  vde2       <none>                        (no description available)

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to