From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1KmpH1-0002tE-UW for qemu-devel@nongnu.org; Mon, 06 Oct 2008 08:33:15 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1KmpH0-0002sw-Gd for qemu-devel@nongnu.org; Mon, 06 Oct 2008 08:33:15 -0400 Received: from [199.232.76.173] (port=47553 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1KmpH0-0002sr-CU for qemu-devel@nongnu.org; Mon, 06 Oct 2008 08:33:14 -0400 Received: from mx1.redhat.com ([66.187.233.31]:34029) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1KmpH0-00080u-8H for qemu-devel@nongnu.org; Mon, 06 Oct 2008 08:33:14 -0400 Received: from int-mx1.corp.redhat.com (int-mx1.corp.redhat.com [172.16.52.254]) by mx1.redhat.com (8.13.8/8.13.8) with ESMTP id m96CWW5w013157 for ; Mon, 6 Oct 2008 08:32:32 -0400 Received: from file.fab.redhat.com (file.fab.redhat.com [10.33.63.6]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id m96CWVDZ011544 for ; Mon, 6 Oct 2008 08:32:31 -0400 Received: from file.fab.redhat.com (localhost.localdomain [127.0.0.1]) by file.fab.redhat.com (8.13.1/8.13.1) with ESMTP id m96CWVoA007301 for ; Mon, 6 Oct 2008 13:32:31 +0100 Received: (from berrange@localhost) by file.fab.redhat.com (8.13.1/8.13.1/Submit) id m96CWVFu007297 for qemu-devel@nongnu.org; Mon, 6 Oct 2008 13:32:31 +0100 Date: Mon, 6 Oct 2008 13:32:31 +0100 From: "Daniel P. Berrange" Subject: Re: [Qemu-devel] [PATCH] USB over network Message-ID: <20081006123230.GP20979@redhat.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Reply-To: "Daniel P. Berrange" , qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org On Mon, Oct 06, 2008 at 04:43:58AM -0700, Gal Hammer wrote: > Hi, > > Attached is a preliminary patch which add QEmu the ability to use local > USB devices over network. It should work with DOK devices and might work > with web cameras. AFAICT, the wire protocol doesn't provide for feature negotiation or versioning, which somewhat limits our ability to extend its capabilities in the future. This is a concern since it is also does not appear to have any kind of security model in the existing impl - QEMU will accept incoming client connections from anywhere. I'd like to see at least an upfront feature negotiation/handshake, such that someone could later add support for authentication and/or encryption, eg by layering in GnuTLS and/or Kerberos via GSSAPI/SASL. Daniel -- |: Red Hat, Engineering, London -o- http://people.redhat.com/berrange/ :| |: http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|