WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-users

RE: [Xen-users] Security Violation?

To: "Steve Kemp" <steve@xxxxxxxxxxxx>, "paulk" <paulk@xxxxxxxxxxxxxxxxxx>
Subject: RE: [Xen-users] Security Violation?
From: "Petersson, Mats" <Mats.Petersson@xxxxxxx>
Date: Wed, 16 Aug 2006 11:14:13 +0200
Cc: xen-users@xxxxxxxxxxxxxxxxxxx
Delivery-date: Wed, 16 Aug 2006 02:15:11 -0700
Envelope-to: www-data@xxxxxxxxxxxxxxxxxx
In-reply-to: <20060816090844.GA10626@xxxxxxxxxxxx>
List-help: <mailto:xen-users-request@lists.xensource.com?subject=help>
List-id: Xen user discussion <xen-users.lists.xensource.com>
List-post: <mailto:xen-users@lists.xensource.com>
List-subscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=subscribe>
List-unsubscribe: <http://lists.xensource.com/cgi-bin/mailman/listinfo/xen-users>, <mailto:xen-users-request@lists.xensource.com?subject=unsubscribe>
Sender: xen-users-bounces@xxxxxxxxxxxxxxxxxxx
Thread-index: AcbBE1CBg1kJpfP8QSq9H8TBciMl7gAAOB3g
Thread-topic: [Xen-users] Security Violation?
 

> -----Original Message-----
> From: xen-users-bounces@xxxxxxxxxxxxxxxxxxx 
> [mailto:xen-users-bounces@xxxxxxxxxxxxxxxxxxx] On Behalf Of Steve Kemp
> Sent: 16 August 2006 10:09
> To: paulk
> Cc: xen-users@xxxxxxxxxxxxxxxxxxx
> Subject: Re: [Xen-users] Security Violation?
> 
> On Wed, Aug 16, 2006 at 08:55:23AM +0000, paulk wrote:
> 
> > I have a dom0 fedora core 5 and domU fedora core 5 running 
> fine, however I've noticed something strange.
> > 
> > If I ssh -X  into the virtual machine and run firefox it 
> seems to work fine, until I download a file. The downloaded 
> file is saved in dom0 and not within the virtual machine. How 
> is this possible?
> > 
> > I've double checked that I am ssh'ing into the correctmachine.
> > 
> > Has anybody else had the same problem?
> 
>   Probably what is happening is that you have Firefox running in dom0
>  already - so when you run the *new* firefox in domU it 
> doesn't actually
>  start a new process and export the display, instead it connects to
>  your already-running instance and just creates a new window.
> 
>   (I'm not sure how this detection works,but it is easy to test,
>  perhaps shared memory of some sort?)
> 
>   To be sure before you start the firefox via the SSH double-check you
>  have no existing firefox processes presesnt.

But surely, Firefox on DomU shouldn't be able to see Firefox on Dom0,
whichever way around it works. 

I think you're on the right lines tho'. Firefox should not be able to
access Dom0 from DomU in anyway shape or form, so Firefox is probably
not running on DomU... 

--
Mats
> 
> Steve
> -- 
> http://xen-hosting.org/
> 
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users
> 
> 
> 



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users