HomeFreeBSD

vmm: Enable unprivileged bhyve

Description

vmm: Enable unprivileged bhyve

  • Add the vmm group.
  • Let /dev/vmmctl belong to the vmm group by default, and give group write permissions.
  • When creating a VM's device files, make them owned by the creating process' effective UID.

Reviewed by: bnovkov
MFC after: 2 months
Sponsored by: The FreeBSD Foundation
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D54741

Details

Provenance
markjAuthored on Feb 19 2026, 2:38 PM
Reviewer
bnovkov
Differential Revision
D54741: vmm: Enable unprivileged bhyve
Parents
rGd4c05edd410e: vmm: Add privilege checks to vmmctl operations
Branches
Unknown
Tags
Unknown