[Libvir] can not use the monitor of Qemu-dm

Hi, I opened the new bugzilla: Summary: can not use the monitor of Qemu-dm URL: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245284 And I attached the patch to fix this problem. Thanks, Saori Fukuta

On Fri, Jun 22, 2007 at 02:28:56PM +0900, Saori Fukuta wrote:
Hi,
I opened the new bugzilla: Summary: can not use the monitor of Qemu-dm URL: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245284
And I attached the patch to fix this problem.
NACK. Turning on the monitor is a security hole. We will not add any option to libvirt/virt-manager to turn on security holes. If you have specify actions you wish to be able to perform (eg changing the CDROM media) please enter BZ tickets for each action, so we can be provide a sensible secure implementation that does not involve the monitor Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|

Hi, Dan About Bugzilla CC: question,(for libvirt BZ future use) Is it OK to add CC: this ML about libvirt related ticket? Or Is it need to specify each person? Thanks Atsushi SAKAI "Daniel P. Berrange" <berrange@redhat.com> wrote:
On Fri, Jun 22, 2007 at 02:28:56PM +0900, Saori Fukuta wrote:
Hi,
I opened the new bugzilla: Summary: can not use the monitor of Qemu-dm URL: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=245284
And I attached the patch to fix this problem.
NACK.
Turning on the monitor is a security hole. We will not add any option to libvirt/virt-manager to turn on security holes.
If you have specify actions you wish to be able to perform (eg changing the CDROM media) please enter BZ tickets for each action, so we can be provide a sensible secure implementation that does not involve the monitor
Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|
-- Libvir-list mailing list Libvir-list@redhat.com https://www.redhat.com/mailman/listinfo/libvir-list

Atsushi SAKAI wrote:
About Bugzilla CC: question,(for libvirt BZ future use) Is it OK to add CC: this ML about libvirt related ticket? Or Is it need to specify each person?
I guess that's probably a sensible idea. What do you think Dan? Rich. -- Emerging Technologies, Red Hat - http://et.redhat.com/~rjones/ Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SL4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 03798903

On Fri, Jun 22, 2007 at 08:34:45PM +0900, Atsushi SAKAI wrote:
Hi, Dan
About Bugzilla CC: question,(for libvirt BZ future use) Is it OK to add CC: this ML about libvirt related ticket? Or Is it need to specify each person?
I'd rather not auto-add the mailing list. I'm already getting spammed by bugzilla twice for every single ticket reported, so don't really need or want a third copy Regards, Dan. -- |=- Red Hat, Engineering, Emerging Technologies, Boston. +1 978 392 2496 -=| |=- Perl modules: http://search.cpan.org/~danberr/ -=| |=- Projects: http://freshmeat.net/~danielpb/ -=| |=- GnuPG: 7D3B9505 F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 -=|

Hi, Dan On Fri, 22 Jun 2007 12:11:47 +0100 "Daniel P. Berrange" wrote:
Turning on the monitor is a security hole. We will not add any option to libvirt/virt-manager to turn on security holes.
If you have specify actions you wish to be able to perform (eg changing the CDROM media) please enter BZ tickets for each action, so we can be provide a sensible secure implementation that does not involve the monitor
Okay, I will enter BZ ticket as a other problem. And may I ask a few more questions about that point ? If we want to the monitor, how do we get ? We have no choice ? Thanks, Saori Fukuta
participants (4)
-
Atsushi SAKAI
-
Daniel P. Berrange
-
Richard W.M. Jones
-
Saori Fukuta