I have a hypervisor running libvirt on a Ubuntu 18.04 system. I need to configure access so that user 'joe' can only manage one domain.
Recently, policykit moved from the .pksa configuration files onto .rules. However, Ubuntu 18.04 ships with an old version of Policykit:
# pkaction --version pkaction version 0.105
When I look at the only .pksa example, I see things like:
[Allow fred libvirt management permissions] Identity=unix-user:fred Action=org.libvirt.unix.manage ResultAny=yes ResultInactive=yes ResultActive=yes
Which is too generic. Am I correct in deducting that in Ubuntu 18.04, it is not possible to limit users to access a single domain via Policykit?
If that's the case, is there an alternative?
Note: a similar, unanswered question is: https://unix.stackexchange.com/questions/367731/libvirt-debian-restrict-user-domain-access