From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1JwJ84-0006Xl-Qt for qemu-devel@nongnu.org; Wed, 14 May 2008 11:42:56 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1JwJ84-0006WD-2Y for qemu-devel@nongnu.org; Wed, 14 May 2008 11:42:56 -0400 Received: from [199.232.76.173] (port=46688 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1JwJ83-0006Vs-RZ for qemu-devel@nongnu.org; Wed, 14 May 2008 11:42:55 -0400 Received: from yw-out-1718.google.com ([74.125.46.152]:30766) by monty-python.gnu.org with esmtp (Exim 4.60) (envelope-from ) id 1JwJ83-0000Y0-Ne for qemu-devel@nongnu.org; Wed, 14 May 2008 11:42:55 -0400 Received: by yw-out-1718.google.com with SMTP id 6so1923188ywa.82 for ; Wed, 14 May 2008 08:42:53 -0700 (PDT) Message-ID: <90eb1dc70805140842s2eff15cdp20bd0b29b1418e58@mail.gmail.com> Date: Wed, 14 May 2008 10:42:53 -0500 From: "Javier Guerra" Subject: Re: [kvm-devel] [Qemu-devel] Re: [PATCH] Add support for a configuration file In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <1210713545-11916-1-git-send-email-aliguori@us.ibm.com> <482ABF6E.6090100@qumranet.com> <482ADA80.3000309@bellard.org> <200805141526.34293.paul@codesourcery.com> <90eb1dc70805140745t61c01ee6w1d9478b02bce3e03@mail.gmail.com> <90eb1dc70805140830w76ed3b17v92f66be45b1845e0@mail.gmail.com> Reply-To: qemu-devel@nongnu.org List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Johannes Schindelin Cc: kvm-devel@lists.sourceforge.net, qemu-devel@nongnu.org On Wed, May 14, 2008 at 10:37 AM, Johannes Schindelin wrote: > On Wed, 14 May 2008, Javier Guerra wrote: > > when embedded, you get to choose what libraries are available. there > > are several examples of fairly secure settings. > > Why artificially make it complicated, and then have to take care of such > issues? i should have said "Lua is secure by default, all libraries are optional", but it's quickly turning into a bikeshed (http://www.bikeshed.com) my own personal preference would be to just stuff the whole command line parameters into the qcow2 image file. -- Javier