Once SPICE allows forwarding of DVD devices, there is a security need to be able to disable this functionality for a/all VMs. For that some engine UI options are needed for SPICE to enable/disable DVD forwarding to the guest and configure the guest accordingly. Ideally this is also possible on a per cluster basis to change the default behaviour for this cluster.
(In reply to Martin Tessun from comment #0) If I understood correctly, DVD forwarding is implemented on the basis of USB forwarding: a virtual USB device is created for the DVD and then forwarded to the guest. We already have an option in VM configuration that enables/disables USB forwarding and this will effectively enable/disable DVD forwarding too. Is this enough for this RFC?
USB forwarding is already configurable (and disabled by default) for SPICE so as DVD forwarding is based on USB forwarding, DVD forwarding can be enabled/disabled that way