There are still some sudo calls in vdsm, mostly calls misc.exec with sudo=True. Instead of adding interfaces for each call, how about changing the misc.exec() to let it contact supervdsm when sudo=True? This could leave existing sudo call code unchanged.
  I wonder why supervdsm exposes many small functions, maybe a function like supervdsm.exec() may solve all? If the root action need to be limitted, may be we can give a command list check in supervdsm.exec() to restrict vdsm's behavior.
 
 
Wenchao Xia