[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] [Xend] Move some backend configuration

Keir Fraser writes ("Re: [Xen-devel] [PATCH] [Xend] Move some backend 
> On 30/9/08 16:30, "Daniel P. Berrange" <berrange@xxxxxxxxxx> wrote:
> > Console data
> >  /local/domain/%d/console/vnc-port
> >  /local/domain/%d/console/tty
> Duplicating this pair of nodes sounds fine to me, *but* then libvirt is
> simply remaining vulnerable to the kind of attack we're are looking to
> avoid? Can any good really come from keeping the old locations?

Once again we have this tradeoff: in an old installation which has not
been properly patched or updated, should we
  (a) continue to let the system `work' but be vulnerable
  (b) make the system report an error so that the administrator
      knows that it needs to be fixed.

At least in this case I suppose we can expect old installations to be
patched _eventually_ ...


Xen-devel mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.