[pve-devel] Cloning of firewall rules

[Dietmar Maurer]

> > destand that Stefan has in mind this:
> > >
> > > when i create a vm i can define that the firewall is on (on this vm)
> > > but i need to have a button like "Import rules from VM: 101) for example
> > >
> > > I think that just copying the fw config ad you said is simpler :-)
> > 
> > sure but what about users not having root access. Normally only a VERY 
> > limited group of people should have access to the root of a hw node.
> 
> The idea was to define 'security groups' for that.

For the record, a security group is just a set of rules, which can be easily
included into a VM ruleset.