[pve-devel] pvefw security group question

[Dietmar Maurer]

> >>My question was if we should allow to apply them independently.
> >>Currently, a VM can only use GROUP-IN for example.
> >>
> >>got it?
> 
> No, sorry :(
> 
> with my patches, we could already apply GROUP-IN in TAP-IN, and GROUP-
> OUT in TAP-OUT


Yes, your approach can do that (that is the point). I think this is too flexible - I would not allow that.