On 2/6/19 2:18 PM, Eric Blake wrote: > Creating a checkpoint does not modify guest-visible state, > but does modify host resources. Rather than reuse existing > domain:write, domain:block_write, or domain:snapshot access > controls, it seems better to introduce a new access control > specific to tasks related to checkpoints and incremental > backups of guest disk state. > > Signed-off-by: Eric Blake <eblake@xxxxxxxxxx> > --- > src/access/viraccessperm.h | 8 +++++++- > src/access/viraccessperm.c | 5 +++-- > 2 files changed, 10 insertions(+), 3 deletions(-) > Seems reasonable, famous last words though ;-) Reviewed-by: John Ferlan <jferlan@xxxxxxxxxx> John
