You are referring to a “no-no”
that refers to multi user situations. XCP’s dom0 is a single user
(root) environment, so you don’t have to worry about hardening the
security in the same ways that you would in a multi user Unix SSH environment.
In the case of XCP’s dom0, the passwd file is only “vulnerable”
if you are already logged into the dom0 as root. And if you are already
logged in as root, you would not need to worry about the passwd file.
-----Original Message-----
From:
xen-users-bounces@xxxxxxxxxxxxxxxxxxx
[mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of A Cold Penguin
Sent: Tuesday, May 10, 2011 2:16
AM
To: xen-users@xxxxxxxxxxxxxxxxxxx
Subject: Re: [Xen-users] XCP:
Insecure Distro ?
> The points highlighted don't represent security risks if the dom0 is
> properly isolated on a secure management network.
Unfortunately there are some situations where even having an air-gap between networks, is not considered secure enough.
Having the password hashes in world-readable files is basically a no-no, and would mean that this product could not go into production use.
Basically this appears to be a relaxation in security against the 'norm', if this is only required due to keeping different pool members in sync,
I think that investigation should be made into an alternative method of synchronising the members.
