Is anyone aware of a way to restrict usage of dom0 (i.e., the
xm command) to a certain subset of commands? In my case I'd like to prevent the dom0 user from doing anything other than resuming a saved domU.
I'm guessing that since you need to be root to use the
xm tool there's not much I can do to restrict powers. I'd love to hear any ideas on other ways of achieving my goal.