On 02/13/2013 12:27 AM, Paolo Bonzini wrote:>> On non-x86 machines CAP_SYS_RAWIO is much less dangerous, especially> when coupled with file DAC.>"File DAC"? -hpa-- H. Peter Anvin, Intel Open Source Technology CenterI work for Intel. I don't speak on their behalf.