Page MenuHomeFreeBSD
Differential D54741

vmm: Enable unprivileged bhyve
ClosedPublic
Actions

Authored by markj on Jan 16 2026, 4:29 PM.
Tags
None
Referenced Files
F146493751: D54741.id172258.diff
Tue, Mar 3, 3:30 AM
F146402371: D54741.id171995.diff
Mon, Mar 2, 10:18 AM
Unknown Object (File)
Fri, Feb 27, 3:04 PM
Unknown Object (File)
Thu, Feb 26, 12:53 AM
Unknown Object (File)
Jan 25 2026, 11:21 AM
Unknown Object (File)
Jan 25 2026, 7:28 AM
Unknown Object (File)
Jan 25 2026, 6:40 AM
Unknown Object (File)
Jan 24 2026, 8:13 PM
View All 18 Files
Subscribers
dtxdf
imp

Details

Reviewers
bnovkov
Group Reviewers
bhyve
Commits
rGaf099eaa5ec3: vmm: Enable unprivileged bhyve
Summary
  • Add the vmm group.
  • Let /dev/vmmctl belong to the vmm group by default, and give group write permissions.
  • When creating a VM's device files, make them owned by the creating process' effective UID.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.Jan 16 2026, 4:29 PM
Herald added a subscriber: imp. · View Herald TranscriptJan 16 2026, 4:29 PM
markj requested review of this revision.Jan 16 2026, 4:29 PM
markj added a parent revision: D54740: vmm: Add privilege checks to vmmctl operations.
markj added a child revision: D54742: vmm.4: Add information on VM access control.
Harbormaster completed remote builds in B69926: Diff 169857.Jan 16 2026, 4:29 PM
dtxdf added a subscriber: dtxdf.Jan 17 2026, 7:48 PM
bnovkov accepted this revision as: bnovkov.Jan 20 2026, 2:32 PM
This revision is now accepted and ready to land.Jan 20 2026, 2:32 PM
markj updated this revision to Diff 171995.Mon, Feb 16, 3:45 PM

Rebase

This revision now requires review to proceed.Mon, Feb 16, 3:45 PM
Harbormaster completed remote builds in B70707: Diff 171995.Mon, Feb 16, 3:45 PM
bnovkov accepted this revision as: bnovkov.Thu, Feb 19, 5:15 PM
This revision is now accepted and ready to land.Thu, Feb 19, 5:15 PM
Closed by commit rGaf099eaa5ec3: vmm: Enable unprivileged bhyve (authored by markj). · Explain WhyThu, Feb 19, 5:16 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rGaf099eaa5ec3: vmm: Enable unprivileged bhyve.

Revision Contents
Changeset List

PathSize
etc/
1 line
sys/
dev/
vmm/
10 lines
sys/
1 line

Diff 172258

View Options

etc/group

Loading...
View Options

sys/dev/vmm/vmm_dev.c

Loading...
View Options

sys/sys/conf.h

Loading...