On Wed, May 11, 2016 at 05:08:30PM +0200, Pavel Hrdina wrote:
Signed-off-by: Pavel Hrdina <phrdina(a)redhat.com>
---
src/qemu/qemu.conf | 11 +++++++
src/qemu/qemu_conf.c | 1 +
src/qemu/qemu_conf.h | 1 +
src/qemu/qemu_process.c | 4 +++
...emuxml2argv-graphics-spice-auto-socket-cfg.args | 20 +++++++++++++
...qemuxml2argv-graphics-spice-auto-socket-cfg.xml | 30 +++++++++++++++++++
tests/qemuxml2argvtest.c | 5 ++++
...muxml2xmlout-graphics-spice-auto-socket-cfg.xml | 35 ++++++++++++++++++++++
tests/qemuxml2xmltest.c | 4 +++
9 files changed, 111 insertions(+)
create mode 100644
tests/qemuxml2argvdata/qemuxml2argv-graphics-spice-auto-socket-cfg.args
create mode 100644
tests/qemuxml2argvdata/qemuxml2argv-graphics-spice-auto-socket-cfg.xml
create mode 100644
tests/qemuxml2xmloutdata/qemuxml2xmlout-graphics-spice-auto-socket-cfg.xml
diff --git a/src/qemu/qemu.conf b/src/qemu/qemu.conf
index 4fa5e8a..baf0b00 100644
--- a/src/qemu/qemu.conf
+++ b/src/qemu/qemu.conf
@@ -130,6 +130,17 @@
#spice_tls_x509_cert_dir = "/etc/pki/libvirt-spice"
+# Enable this option to have SPICE served over an automatically created
+# unix socket. This prevents unprivileged access from users on the
+# host machine, though most SPICE clients do not support it.
+#
+# This will only be enabled for SPICE configurations that do not have
+# a hardcoded 'listen' or 'socket' value. This setting takes preference
I think the "hardcoded 'listen' or 'socket' value" should be
rephrased
to refer to <listen> nodes instead.
Christophe