[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [Xen-users] Security Violation?



 

> -----Original Message-----
> From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx 
> [mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Steve Kemp
> Sent: 16 August 2006 10:09
> To: paulk
> Cc: xen-users@xxxxxxxxxxxxxxxxxxx
> Subject: Re: [Xen-users] Security Violation?
> 
> On Wed, Aug 16, 2006 at 08:55:23AM +0000, paulk wrote:
> 
> > I have a dom0 fedora core 5 and domU fedora core 5 running 
> fine, however I've noticed something strange.
> > 
> > If I ssh -X  into the virtual machine and run firefox it 
> seems to work fine, until I download a file. The downloaded 
> file is saved in dom0 and not within the virtual machine. How 
> is this possible?
> > 
> > I've double checked that I am ssh'ing into the correctmachine.
> > 
> > Has anybody else had the same problem?
> 
>   Probably what is happening is that you have Firefox running in dom0
>  already - so when you run the *new* firefox in domU it 
> doesn't actually
>  start a new process and export the display, instead it connects to
>  your already-running instance and just creates a new window.
> 
>   (I'm not sure how this detection works,but it is easy to test,
>  perhaps shared memory of some sort?)
> 
>   To be sure before you start the firefox via the SSH double-check you
>  have no existing firefox processes presesnt.

But surely, Firefox on DomU shouldn't be able to see Firefox on Dom0,
whichever way around it works. 

I think you're on the right lines tho'. Firefox should not be able to
access Dom0 from DomU in anyway shape or form, so Firefox is probably
not running on DomU... 

--
Mats
> 
> Steve
> -- 
> http://xen-hosting.org/
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 
> 
> 



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.