vmm: Enable unprivileged bhyve

- Add the vmm group.
- Let /dev/vmmctl belong to the vmm group by default, and give group
  write permissions.
- When creating a VM's device files, make them owned by the creating
  process' effective UID.

Reviewed by:	bnovkov
MFC after:	2 months
Sponsored by:	The FreeBSD Foundation
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D54741
This commit is contained in:
Mark Johnston
2026-02-19 14:38:46 +00:00
parent d4c05edd41
commit af099eaa5e
3 changed files with 7 additions and 5 deletions
+1
View File
@@ -34,5 +34,6 @@ ntpd:*:123:
_ypldap:*:160:
hast:*:845:
tests:*:977:
vmm:*:978:
nogroup:*:65533:
nobody:*:65534: