openstack team mailing list archive

[Dean Troyer <dtroyer@xxxxxxxxx>]

On Thu, May 24, 2012 at 3:05 PM, Igor Laskovy <igor.laskovy@xxxxxxxxx> wrote:
> kvm: -netdev tap,ifname=tap24b9f3da-8b,script=,id=hostnet0: could not
> open /dev/net/tun: Operation not permitted

By chance I just happened to find the solution this afternoon...add
the following to /etc/libvirt/qemu.conf and restart libvirt:

cgroup_device_acl = [
   "/dev/null", "/dev/full", "/dev/zero",
   "/dev/random", "/dev/urandom",
   "/dev/ptmx", "/dev/kvm", "/dev/kqemu",
   "/dev/rtc", "/dev/hpet", "/dev/net/tun",
]

It is possible that the list can be pared down, I pulled that verbatim
from http://fedoraproject.org/wiki/Quantum.

dt

-- 

Dean Troyer
dtroyer@xxxxxxxxx