On 28.08.2012 00:11, Henry Cejtin wrote: > I'm completely confused about access to /dev/kvm. In particular, it > looks like it is too open to access, but in a way that I don't > understand. > > On my machine, /dev/kvm is owned by root.root and mode 660. Here is the > output of ls: > > % ls -l /dev/kvm > crw-rw----+ 1 root root 10, 232 Aug 24 15:03 /dev/kvm Note the plus sign in there (+). Run getfacl on this file. Most likely it is consolekit/policykit which has a rule to add ACLs to some devices (audio etc) for a current session user. /mjt -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html