From: Nivedita Singhvi <niv@us.ibm.com>
To: xen-devel <xen-devel@lists.xensource.com>
Subject: [PATCH] Turn http access off in default xend-config.sxp
Date: Thu, 15 Dec 2005 15:56:04 -0800 [thread overview]
Message-ID: <43A20294.8060604@us.ibm.com> (raw)
[-- Attachment #1: Type: text/plain, Size: 1565 bytes --]
For security reasons, since most people run with the default
file and don't make any changes, turning http access off again.
thanks,
Nivedita
# HG changeset patch
# User nivedita@hex
# Node ID bebb5e237e7d42f4bd40610f85b73705047d9975
# Parent 6b1d39a56c2be5dbc2290f508d24eac750111cf4
Xend http access turned off by default.
Signed-off-by: Nivedita Singhvi (niv@us.ibm.com)
diff -r 6b1d39a56c2b -r bebb5e237e7d tools/examples/xend-config.sxp
--- a/tools/examples/xend-config.sxp Thu Dec 15 20:50:12 2005
+++ b/tools/examples/xend-config.sxp Thu Dec 15 23:52:39 2005
@@ -4,9 +4,9 @@
# Xend configuration file.
#
-# This example configuration is appropriate for an installation that trusts
-# only localhost connections, and is otherwise fully functional, with a
-# bridged network configuration.
+# This example configuration is appropriate for an installation that
+# utilizes a bridged network configuration. Access to xend via http
+# is disabled.
# Commented out entries show the default for that entry, unless otherwise
# specified.
@@ -15,7 +15,6 @@
#(loglevel DEBUG)
#(xend-http-server no)
-(xend-http-server yes)
#(xend-unix-server yes)
#(xend-relocation-server no)
(xend-relocation-server yes)
@@ -34,7 +33,7 @@
# Specifying 'localhost' prevents remote connections.
# Specifying the empty string '' (the default) allows all connections.
#(xend-address '')
-(xend-address localhost)
+#(xend-address localhost)
# Address xend should listen on for relocation-socket connections, if
# xend-relocation-server is set.
[-- Attachment #2: httpdef.patch --]
[-- Type: text/plain, Size: 1406 bytes --]
# HG changeset patch
# User nivedita@hex
# Node ID bebb5e237e7d42f4bd40610f85b73705047d9975
# Parent 6b1d39a56c2be5dbc2290f508d24eac750111cf4
Xend http access turned off by default.
Signed-off-by: Nivedita Singhvi (niv@us.ibm.com)
diff -r 6b1d39a56c2b -r bebb5e237e7d tools/examples/xend-config.sxp
--- a/tools/examples/xend-config.sxp Thu Dec 15 20:50:12 2005
+++ b/tools/examples/xend-config.sxp Thu Dec 15 23:52:39 2005
@@ -4,9 +4,9 @@
# Xend configuration file.
#
-# This example configuration is appropriate for an installation that trusts
-# only localhost connections, and is otherwise fully functional, with a
-# bridged network configuration.
+# This example configuration is appropriate for an installation that
+# utilizes a bridged network configuration. Access to xend via http
+# is disabled.
# Commented out entries show the default for that entry, unless otherwise
# specified.
@@ -15,7 +15,6 @@
#(loglevel DEBUG)
#(xend-http-server no)
-(xend-http-server yes)
#(xend-unix-server yes)
#(xend-relocation-server no)
(xend-relocation-server yes)
@@ -34,7 +33,7 @@
# Specifying 'localhost' prevents remote connections.
# Specifying the empty string '' (the default) allows all connections.
#(xend-address '')
-(xend-address localhost)
+#(xend-address localhost)
# Address xend should listen on for relocation-socket connections, if
# xend-relocation-server is set.
[-- Attachment #3: Type: text/plain, Size: 138 bytes --]
_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel
next reply other threads:[~2005-12-15 23:56 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-12-15 23:56 Nivedita Singhvi [this message]
2005-12-16 11:47 ` [PATCH] Turn http access off in default xend-config.sxp Ewan Mellor
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=43A20294.8060604@us.ibm.com \
--to=niv@us.ibm.com \
--cc=xen-devel@lists.xensource.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.