[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-users] Disable QEMU monitor in HVM domains

  • To: xen-users@xxxxxxxxxxxxxxxxxxx
  • From: "Rik v. A" <rikratva@xxxxxxxxx>
  • Date: Tue, 30 Dec 2008 13:43:21 +0100
  • Delivery-date: Tue, 30 Dec 2008 04:43:59 -0800
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:mime-version:content-type :content-transfer-encoding:content-disposition; b=U/incOSzW152hdF1kQSF8QtAI9+1b08i1nBmspsDHe06YjH2ZCa285wLGinW8TLKqg YTISRkNiuj1+dWocXXdzl/NTbwNbN9t4Z534hQdvd4NIYNaSZTdWB1WAMKSyIyTzyoSk iQyX02DPpkWTjr5RgRgx8KYYKMzRe5FZcgoMA=
  • List-id: Xen user discussion <xen-users.lists.xensource.com>


I use Xen 3.3, installed from sources. I run a few HVM domains for
clients. QEMU is also from the Xen 3.3 source package.

It seems that the QEMU Monitor is *by default* accessible via the VNC
interface (CTRL+ALT+2) on these domains. I did some research on
Google, and it seems that most people say that it has been disabled by
default since an earlier Xen/QEMU branch.

I am using more or less the default out-of-the box configuration, with
few options changed.
This is of course a big security risk. The monitor should be disabled
by default, and it clearly isn't.

I can't seem to disable it either. I tried options "monitor=0" and
such in the domain configurations, but there's no difference.

I would really, really, really like to change this behavior!

Kind regards,

Xen-users mailing list



Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.