qemu-server/PVE/QemuServer
Dominik Csapak e3971865b4 enable cluster mapped USB devices for guests
this patch allows configuring usb devices that are mapped via
cluster resource mapping when the user has 'Mapping.Use' on the ACL
path '/mapping/usb/{ID}' (in addition to the usual required vm config
privileges)

for now, this is only valid if there is exactly one mapping for the
host, since we don't track passed through usb devices yet

This now also checks permissions on clone/restore, meaning a
'non-mapped' device can only be cloned/restored as root@pam user.
That is a breaking change.

Refactor the checks for restoring into a sub, so we have central place
where we can add such checks

Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
Tested-By:  Markus Frank <m.frank@proxmox.com>
2023-06-16 16:24:02 +02:00
..
Agent.pm tree wide cleanup of s/return undef/return/ 2020-10-16 16:20:05 +02:00
CGroup.pm add PVE::QemuServer::Cgroup 2020-11-24 12:00:33 +01:00
Cloudinit.pm cloudinit: pass through hostname via fqdn field 2023-06-07 19:33:28 +02:00
CPUConfig.pm cpuconfig: add new x86-64-vX models 2023-06-12 17:30:11 +02:00
Drive.pm ovmf efi disk: ignore efitype parameter for ARM VMs 2023-02-23 16:29:57 +01:00
Helpers.pm helpers: actualy future proof and allow also checking releases 2023-06-16 13:53:52 +02:00
ImportDisk.pm api: support VM disk import 2022-04-04 16:41:13 +02:00
Machine.pm cfg2cmd: fix +pveN machine types with pxe 2021-04-18 17:58:56 +02:00
Makefile add PVE::QemuServer::Cgroup 2020-11-24 12:00:33 +01:00
Memory.pm memory: hotplug: sort by numerical ID rather than slot when unplugging 2023-03-17 14:05:02 +01:00
Monitor.pm mon_cmd: add explicit return 2019-11-30 17:24:55 +01:00
OVF.pm parse ovf: untaint path when calling file_size_info 2022-03-11 10:45:59 +01:00
PCI.pm pci: make mediated device sysfs path independent of PCI id 2022-11-09 09:06:19 +01:00
USB.pm enable cluster mapped USB devices for guests 2023-06-16 16:24:02 +02:00