Re: [Xen-devel] [PATCH] [Xend] Move some backend configuration

[Ian Jackson <Ian.Jackson@xxxxxxxxxxxxx>]

Keir Fraser writes ("Re: [Xen-devel] [PATCH] [Xend] Move some backend 
configuration"):
> On 30/9/08 16:30, "Daniel P. Berrange" <berrange@xxxxxxxxxx> wrote:
> > Console data
> >  /local/domain/%d/console/vnc-port
> >  /local/domain/%d/console/tty
> 
> Duplicating this pair of nodes sounds fine to me, *but* then libvirt is
> simply remaining vulnerable to the kind of attack we're are looking to
> avoid? Can any good really come from keeping the old locations?

Once again we have this tradeoff: in an old installation which has not
been properly patched or updated, should we
  (a) continue to let the system `work' but be vulnerable
  (b) make the system report an error so that the administrator
      knows that it needs to be fixed.

At least in this case I suppose we can expect old installations to be
patched _eventually_ ...

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel