From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1NKHim-0003Xf-Vj for qemu-devel@nongnu.org; Mon, 14 Dec 2009 15:40:45 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1NKHii-0003Tt-2u for qemu-devel@nongnu.org; Mon, 14 Dec 2009 15:40:44 -0500 Received: from [199.232.76.173] (port=37145 helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1NKHih-0003Th-SR for qemu-devel@nongnu.org; Mon, 14 Dec 2009 15:40:39 -0500 Received: from mail.gmx.net ([213.165.64.20]:40212) by monty-python.gnu.org with smtp (Exim 4.60) (envelope-from ) id 1NKHih-0001YX-9O for qemu-devel@nongnu.org; Mon, 14 Dec 2009 15:40:39 -0500 Message-ID: From: "Sebastian Herbszt" References: <20091214132423.GB973@redhat.com> <4B263F23.2090601@suse.de> <4B2647AF.1030605@codemonkey.ws> <20091214141143.GA1360@redhat.com> <20091214141341.GB1360@redhat.com> <4B264AF1.6060802@codemonkey.ws> <7FB8DD1225E54176BCAF5523B6AEA89B@FSCPC> <4B26931E.4000101@codemonkey.ws> <20091214194210.GB6150@redhat.com> <4B269933.3010906@codemonkey.ws> <20091214202019.GF6150@redhat.com> <4B26A0DE.5000304@redhat.com> In-Reply-To: <4B26A0DE.5000304@redhat.com> Subject: Re: [Qemu-devel] Re: qdev property bug? Date: Mon, 14 Dec 2009 21:38:25 +0100 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=response Content-Transfer-Encoding: 7bit List-Id: qemu-devel.nongnu.org List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Gerd Hoffmann , "Michael S. Tsirkin" Cc: glommer@redhat.com, Kevin O'Connor , Alexander Graf , qemu-devel@nongnu.org Gerd Hoffmann wrote: > On 12/14/09 21:20, Michael S. Tsirkin wrote: >>> So far, it's not clear to me that anyone has demonstrated how this is >>> harmful for people that don't want pxe booting. Assuming we fix the bug >>> about rom loading, then there's really no impact to users. > > Fix (v2) is on the list already. > >> PXE booting might have security impact. You do not want to >> do this if you are on a hostile network. > > Option rom loaded doesn't imply pxe boot will be tried. It only means > PXE boot can be selected, either via > > -boot order=[something with 'n' here] > > or via > > -boot menu=on + F12 + picking menu entry > > By default qemu doesn't try to PXE-boot, even if no other bootable > device is available. Tho this depends on the option rom, e.g. Etherboot hooks INT 19h. - Sebastian