From mboxrd@z Thu Jan 1 00:00:00 1970 From: Zhigang Wang Subject: Re: Suggestion for merging xl save/restore/migrate/migrate-receive Date: Mon, 16 Sep 2013 16:51:34 -0400 Message-ID: <52376F56.4000605@oracle.com> References: <523337AA.5080103@oracle.com> <5237291C.9090100@oracle.com> <21047.12251.625579.745154@mariner.uk.xensource.com> <523742B3.5040204@oracle.com> <1379364132.11304.61.camel@hastur.hellion.org.uk> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1379364132.11304.61.camel@hastur.hellion.org.uk> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: Ian Campbell Cc: George Dunlap , Ian Jackson , xen-devel List-Id: xen-devel@lists.xenproject.org On 09/16/2013 04:42 PM, Ian Campbell wrote: > On Mon, 2013-09-16 at 13:41 -0400, Zhigang Wang wrote: >> keys are states; we need to make sure they are always sync. Also after >> this, all Servers in a pool can login to each other. I don't know >> whether it'sa security issue for our product. > > FYI a ssh key can be limited to only allow certain commands to be run, > by using the "command=" syntax in authorized_keys. Thanks Ian. I don't know this yet. I will try this and consider this. Zhigang