Kernel and Policies

[nicholas roveda]

In the past I've read in the docs about the way to isolate the root account in VMs using PolKit.

I was wandering if there is a way to always prompt Dom0 for authorization for some specific operations inside VMs, like a syscall, using policies or better modifying the kernel.