qemu-devel.nongnu.org archive mirror
 help / color / mirror / Atom feed
From: Wouter Verhelst <w@uter.be>
To: "Ciprian Dorin, Craciun" <ciprian.craciun@gmail.com>
Cc: nbd-general@lists.sourceforge.net, linux-newbie@vger.kernel.org,
	qemu-devel@nongnu.org
Subject: Re: [Nbd] [Qemu-devel] Transforming stdin and stdout pair into a socket
Date: Mon, 11 May 2009 21:31:55 +0200	[thread overview]
Message-ID: <20090511193155.GO12606@country.nixsys.be> (raw)
In-Reply-To: <8e04b5820905110632q1a3b9ad4u49d4f3208d994755@mail.gmail.com>

On Mon, May 11, 2009 at 04:32:26PM +0300, Ciprian Dorin, Craciun wrote:
>     About the other solution with SSH port forwarding, I don't really
> like it, because it has some security implications: any process on the
> local machine can access the block device...

That's still the case even if you do not use SSH port forwarding; NBD
does not actually implement anything remotely resembling security at
this point.

I've had plans to implement username/password authentication in
nbd-server and nbd-client, and there's even an implementation floating
around somewhere (written by someone else), but it still needs some work
and isn't finished. Additionally, I'd have to be able to get a patch
into qemu-nbd.c so that it'd support that kind of authentication, too.

-- 
<Lo-lan-do> Home is where you have to wash the dishes.
  -- #debian-devel, Freenode, 2004-09-22

  reply	other threads:[~2009-05-11 19:32 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-05-10 18:19 [Qemu-devel] Transforming stdin and stdout pair into a socket Ciprian Dorin, Craciun
2009-05-11  8:03 ` [Qemu-devel] Re: [Nbd] " Laurent Vivier
2009-05-11 13:28   ` Ciprian Dorin, Craciun
2009-05-11 12:02 ` [Qemu-devel] " Anthony Liguori
2009-05-11 13:32   ` Ciprian Dorin, Craciun
2009-05-11 19:31     ` Wouter Verhelst [this message]
2009-05-11 23:07     ` Paul Brook
2009-05-12  2:24       ` Anthony Liguori

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090511193155.GO12606@country.nixsys.be \
    --to=w@uter.be \
    --cc=ciprian.craciun@gmail.com \
    --cc=linux-newbie@vger.kernel.org \
    --cc=nbd-general@lists.sourceforge.net \
    --cc=qemu-devel@nongnu.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).