From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NJB51-0002tw-HU for qemu-devel@nongnu.org; Fri, 11 Dec 2009 14:23:07 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NJB4w-0002mm-MA for qemu-devel@nongnu.org; Fri, 11 Dec 2009 14:23:06 -0500 Received: from [199.232.76.173] (port=42902 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NJB4w-0002mR-8g for qemu-devel@nongnu.org; Fri, 11 Dec 2009 14:23:02 -0500 Received: from mx1.redhat.com ([209.132.183.28]:59210) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1NJB4v-000329-Qp for qemu-devel@nongnu.org; Fri, 11 Dec 2009 14:23:02 -0500 Date: Fri, 11 Dec 2009 21:22:53 +0200 From: Izik Eidus Subject: Re: [Qemu-devel] Spice project is now open Message-ID: <20091211212253.3cf5a711@redhat.com> In-Reply-To: <4B229847.3060400@codemonkey.ws> References: <1393046876.1549021260539141025.JavaMail.root@zmail05.collab.prod.int.phx2.redhat.com> <4B226BFC.1040606@codemonkey.ws> <20091211204828.464707cf@redhat.com> <20091211210032.425fb640@redhat.com> <4B229847.3060400@codemonkey.ws> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Anthony Liguori Cc: Yaniv Kamay , qemu-devel@nongnu.org On Fri, 11 Dec 2009 13:06:47 -0600 Anthony Liguori wrote: > Izik Eidus wrote: > > I want to add that qemu is not the sole user of spice, Spice will be > > used as a protocol to connect into physical windows/linux > > machines.... > > > > So how can we change the library just for qemu? > > > A library is not necessarily a problem. > > What would be a probably is if the library maintains guest visible > state. There are a lot of advantages to keeping qemu as the sole > maintainer of guest visible state as it simplifies things like live > migration. More importantly, it allows us to do things like Avi's > suggested security sandboxing using seccomp(). For that to work, we > need to make sure that we can isolate any code that interacts > directly with the guest. Spice guest visible state inside qemu is just its PCI QXL device. This part is qemu specificed. > > Regards, > > Anthony Liguori