From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1KXCVv-0003fA-3e for qemu-devel@nongnu.org; Sun, 24 Aug 2008 06:08:03 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1KXCVs-0003c6-1b for qemu-devel@nongnu.org; Sun, 24 Aug 2008 06:08:01 -0400 Received: from [199.232.76.173] (port=53900 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1KXCVr-0003bS-K4 for qemu-devel@nongnu.org; Sun, 24 Aug 2008 06:07:59 -0400 Received: from il.qumranet.com ([212.179.150.194]:30058) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1KXCVq-0001I7-PT for qemu-devel@nongnu.org; Sun, 24 Aug 2008 06:07:59 -0400 Message-ID: <48B132FC.2030304@qumranet.com> Date: Sun, 24 Aug 2008 13:07:56 +0300 From: Avi Kivity MIME-Version: 1.0 Subject: Re: [Xen-devel] Re: [Qemu-devel] [PATCH 12/13] set vnc password from xenstore. References: <1219336054-15919-1-git-send-email-kraxel@redhat.com> <1219336054-15919-13-git-send-email-kraxel@redhat.com> <48ADCCA2.8050201@codemonkey.ws> <20080821201955.GG1531@redhat.com> <48ADCE91.2070602@codemonkey.ws> <48B12280.9010202@qumranet.com> <20080824095903.GA24946@shareable.org> In-Reply-To: <20080824095903.GA24946@shareable.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org Cc: xen-devel@lists.xensource.com, Gerd Hoffmann Jamie Lokier wrote: > Avi Kivity wrote: > >> Anthony Liguori wrote: >> >>>> -vnc localhost:3,passwdfd=6 >>>> >>> In general, I strongly dislike passing file descriptors like this. >>> >> I find this very useful, and actually think we should encourage it, and >> also allow passing file descriptors over the monitor (using >> SCM_RIGHTS). This can help de-privilege qemu. In fact, you can run a >> guest where qemu doesn't even have permissions to open the backing file. >> > > You can already do this: > > qemu -hdc /proc/self/fd/3 3<>MS-DOS-6.22.img > > Not over the monitor. -- error compiling committee.c: too many arguments to function