[Xen-devel] Xend listening for TCP HTTP?

[Anthony Liguori <aliguori@xxxxxxxxxx>]

Hi,

On IRC, it came up that recent snapshots of Xend are now listening for 
TCP HTTP connections again by default.  Since it's still listening on a 
Unix socket and xm will always prefer that, xm still only functions as root.
However, less privileged users can still connect to the TCP port and 
through Xend gain root access.  This seems like a pretty bad default 
configuration.  I poked around on the TCP interface but couldn't seem to 
confirm this (does it only accept s-expression Content-Type now?).
Thanks for any clarification on this.

Regards,

Anthony Liguori

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel