Page MenuHomeFreeBSD
Differential D54741

vmm: Enable unprivileged bhyve
ClosedPublic
Actions

Authored by markj on Jan 16 2026, 4:29 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Feb 26, 12:53 AM
Unknown Object (File)
Jan 25 2026, 11:21 AM
Unknown Object (File)
Jan 25 2026, 7:28 AM
Unknown Object (File)
Jan 25 2026, 6:40 AM
Unknown Object (File)
Jan 24 2026, 8:13 PM
Unknown Object (File)
Jan 24 2026, 2:21 AM
Unknown Object (File)
Jan 21 2026, 12:12 PM
Unknown Object (File)
Jan 20 2026, 11:40 AM
View All 15 Files
Subscribers
dtxdf
imp

Details

Reviewers
bnovkov
Group Reviewers
bhyve
Commits
rGaf099eaa5ec3: vmm: Enable unprivileged bhyve
Summary
  • Add the vmm group.
  • Let /dev/vmmctl belong to the vmm group by default, and give group write permissions.
  • When creating a VM's device files, make them owned by the creating process' effective UID.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 70707
Build 67590: arc lint + arc unit

Event Timeline

markj created this revision.Jan 16 2026, 4:29 PM
Herald added a subscriber: imp. · View Herald TranscriptJan 16 2026, 4:29 PM
markj requested review of this revision.Jan 16 2026, 4:29 PM
markj added a parent revision: D54740: vmm: Add privilege checks to vmmctl operations.
markj added a child revision: D54742: vmm.4: Add information on VM access control.
Harbormaster completed remote builds in B69926: Diff 169857.Jan 16 2026, 4:29 PM
dtxdf added a subscriber: dtxdf.Jan 17 2026, 7:48 PM
bnovkov accepted this revision as: bnovkov.Jan 20 2026, 2:32 PM
This revision is now accepted and ready to land.Jan 20 2026, 2:32 PM
markj updated this revision to Diff 171995.Mon, Feb 16, 3:45 PM

Rebase

This revision now requires review to proceed.Mon, Feb 16, 3:45 PM
Harbormaster completed remote builds in B70707: Diff 171995.Mon, Feb 16, 3:45 PM
bnovkov accepted this revision as: bnovkov.Thu, Feb 19, 5:15 PM
This revision is now accepted and ready to land.Thu, Feb 19, 5:15 PM
Closed by commit rGaf099eaa5ec3: vmm: Enable unprivileged bhyve (authored by markj). · Explain WhyThu, Feb 19, 5:16 PM
This revision was automatically updated to reflect the committed changes.
markj added a commit: rGaf099eaa5ec3: vmm: Enable unprivileged bhyve.

Revision Contents
Changeset List

PathSize
etc/
1 line
sys/
dev/
vmm/
10 lines
sys/
1 line

Diff 171995

View Options

etc/group

Loading...
View Options

sys/dev/vmm/vmm_dev.c

Loading...
View Options

sys/sys/conf.h

Loading...