[PATCH] Turn http access off in default xend-config.sxp

[PATCH] Turn http access off in default xend-config.sxp

[Nivedita Singhvi]

[-- Attachment #1: Type: text/plain, Size: 1565 bytes --]

For security reasons, since most people run with the default
file and don't make any changes, turning http access off again.

thanks,
Nivedita

# HG changeset patch
# User nivedita@hex
# Node ID bebb5e237e7d42f4bd40610f85b73705047d9975
# Parent  6b1d39a56c2be5dbc2290f508d24eac750111cf4
Xend http access turned off by default.

Signed-off-by: Nivedita Singhvi (niv@us.ibm.com)

diff -r 6b1d39a56c2b -r bebb5e237e7d tools/examples/xend-config.sxp
--- a/tools/examples/xend-config.sxp    Thu Dec 15 20:50:12 2005
+++ b/tools/examples/xend-config.sxp    Thu Dec 15 23:52:39 2005
@@ -4,9 +4,9 @@
  # Xend configuration file.
  #

-# This example configuration is appropriate for an installation that trusts
-# only localhost connections, and is otherwise fully functional, with a
-# bridged network configuration.
+# This example configuration is appropriate for an installation that
+# utilizes a bridged network configuration. Access to xend via http
+# is disabled.

  # Commented out entries show the default for that entry, unless otherwise
  # specified.
@@ -15,7 +15,6 @@
  #(loglevel DEBUG)

  #(xend-http-server no)
-(xend-http-server yes)
  #(xend-unix-server yes)
  #(xend-relocation-server no)
  (xend-relocation-server yes)
@@ -34,7 +33,7 @@
  # Specifying 'localhost' prevents remote connections.
  # Specifying the empty string '' (the default) allows all connections.
  #(xend-address '')
-(xend-address localhost)
+#(xend-address localhost)

  # Address xend should listen on for relocation-socket connections, if
  # xend-relocation-server is set.




[-- Attachment #2: httpdef.patch --]
[-- Type: text/plain, Size: 1406 bytes --]

# HG changeset patch
# User nivedita@hex
# Node ID bebb5e237e7d42f4bd40610f85b73705047d9975
# Parent  6b1d39a56c2be5dbc2290f508d24eac750111cf4
Xend http access turned off by default. 

Signed-off-by: Nivedita Singhvi (niv@us.ibm.com)

diff -r 6b1d39a56c2b -r bebb5e237e7d tools/examples/xend-config.sxp
--- a/tools/examples/xend-config.sxp	Thu Dec 15 20:50:12 2005
+++ b/tools/examples/xend-config.sxp	Thu Dec 15 23:52:39 2005
@@ -4,9 +4,9 @@
 # Xend configuration file.
 #
 
-# This example configuration is appropriate for an installation that trusts
-# only localhost connections, and is otherwise fully functional, with a
-# bridged network configuration.
+# This example configuration is appropriate for an installation that 
+# utilizes a bridged network configuration. Access to xend via http
+# is disabled.  
 
 # Commented out entries show the default for that entry, unless otherwise
 # specified.
@@ -15,7 +15,6 @@
 #(loglevel DEBUG)
 
 #(xend-http-server no)
-(xend-http-server yes)
 #(xend-unix-server yes)
 #(xend-relocation-server no)
 (xend-relocation-server yes)
@@ -34,7 +33,7 @@
 # Specifying 'localhost' prevents remote connections.
 # Specifying the empty string '' (the default) allows all connections.
 #(xend-address '')
-(xend-address localhost)
+#(xend-address localhost)
 
 # Address xend should listen on for relocation-socket connections, if
 # xend-relocation-server is set.

[-- Attachment #3: Type: text/plain, Size: 138 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xensource.com
http://lists.xensource.com/xen-devel

Re: [PATCH] Turn http access off in default xend-config.sxp

[Ewan Mellor]

On Thu, Dec 15, 2005 at 03:56:04PM -0800, Nivedita Singhvi wrote:

> For security reasons, since most people run with the default
> file and don't make any changes, turning http access off again.

Applied, thanks Nivedita.

Ewan.