From e209314e79220b6f1f7a6d3f5ea322b4e03c329e Mon Sep 17 00:00:00 2001
From: Manuel Bentele
Date: Mon, 5 Jul 2021 08:59:45 +0200
Subject: [qemu] Add QEMU bridge helper to access bridges from user session

---
 core/modules/qemu/data/etc/qemu/bridge.conf | 3 +++
 core/modules/qemu/module.build              | 7 ++++++-
 2 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 core/modules/qemu/data/etc/qemu/bridge.conf

diff --git a/core/modules/qemu/data/etc/qemu/bridge.conf b/core/modules/qemu/data/etc/qemu/bridge.conf
new file mode 100644
index 00000000..829df227
--- /dev/null
+++ b/core/modules/qemu/data/etc/qemu/bridge.conf
@@ -0,0 +1,3 @@
+allow br0
+allow nat1
+allow vsw2
diff --git a/core/modules/qemu/module.build b/core/modules/qemu/module.build
index 6a980dd9..2a7952e8 100644
--- a/core/modules/qemu/module.build
+++ b/core/modules/qemu/module.build
@@ -22,5 +22,10 @@ build() {
 }
 
 post_copy() {
-	:
+	# change access rights of the qemu bridge helper config
+	chown root:kvm /etc/qemu/bridge.conf
+	chmod 0664 /etc/qemu/bridge.conf
+
+	# set UID to avoid operation not permitted errors
+	chmod u+s /usr/lib/qemu/qemu-bridge-helper
 }
-- 
cgit v1.2.3-55-g7522