Thank you for reviewing and sorry for my late response. > > > > Is following better? :-) > > > > Domain process is allowed to... > > > >> + by cap element. What capabilities host supports can be found at > >> + capability XML. > > > > Better to add the virsh command. e.g. > > > > capability XML (virsh capabilities) > > Also we need to declare the caps are OS dependant. I don't know proper "cap" name, so it complied with that of libcap-ng. > > > >> +</p> > >> + > >> +<pre> > >> + ... > >> +<process> > >> +<cap name="chown"/> > >> +<cap name="dac_override"/> > >> +<cap name="dac_read_search"/> .... > > > > Signed-off-by: Taku Izumi<izumi.taku@xxxxxxxxxxxxxx> > > Signed-off-by: Shota Hirae<m11g1401@xxxxxxxxxxxxxx> > > --- > > docs/formatdomain.html.in | 48 ++++++++++++++++++++++++++++++++++++++ > > docs/schemas/domaincommon.rng | 52 ++++++++++++++++++++++++++++++++++++++++++ > > src/conf/domain_conf.c | 33 ++++++++++++++++++++++++++ > > src/conf/domain_conf.h | 2 + > > 4 files changed, 135 insertions(+) > > > > And better to add some tests. What type of test? domain schema test? -- Best regards, Taku Izumi <izumi.taku@xxxxxxxxxxxxxx> -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list