Re: [Xen-devel] Xen 4.2.0 Release Plan / TODO

[Pasi Kärkkäinen <pasik@xxxxxx>]

On Wed, Sep 05, 2012 at 09:34:27AM +0100, Ian Campbell wrote:
> On Wed, 2012-09-05 at 03:51 +0100, Pasi Kärkkäinen wrote:
> > On Mon, Sep 03, 2012 at 10:42:40AM +0100, Ian Campbell wrote:
> > > 
> > > tools, nice to have:
> > > 
> > >     * xl compatibility with xm:
> > > 
> >           * xl support for "monitor" command. I don't see it mentioned in 
> > xl.cfg docs.
> >             (the command to enable/disable access to the per-vm Qemu 
> > monitor/console 
> >              from VNC, which is usually accessed with ctrl-alt-2).
> 
> I can't see that happening for 4.2.0 now I'm afraid. Probably best to
> bring it up with George in the 4.3 thread. It might be a candidate for
> 4.2.1 depending on the size of the patch.
> 

Yep. If "monitor2 is enabled as a default (I'm not sure about that), then it's 
a security issue.. 
User having a VNC session to the console of the VM can run Qemu commands, so 
for example map .iso files from dom0 etc..

-- Pasi


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel