WARNING - OLD ARCHIVES

This is an archived copy of the Xen.org mailing list, which we have preserved to ensure that existing links to archives are not broken. The live archive, which contains the latest emails, can be found at http://lists.xen.org/
   
 
 
Xen 
 
Home Products Support Community News
 
   
 

xen-devel

Re: [Xen-devel] [PATCH] Scrub VNC passwords from XenD log files

On Wed, Dec 06, 2006 at 07:43:09PM +0000, Daniel P. Berrange wrote:

> On Wed, Dec 06, 2006 at 05:24:36PM +0000, Ewan Mellor wrote:
> > On Wed, Dec 06, 2006 at 05:16:03PM +0000, Daniel P. Berrange wrote:
> > 
> > > I didn't add the signed-off-by because the patch isn't finished - I 
> > > really 
> > > just wanted to see if people were amenable to this kind of approach before
> > > doing more work on it. Since you like it, I'll finish it off shortly - 
> > > there
> > > just a couple more test cases I need to go through - suspend/restore & 
> > > inactive
> > > domains - to verify passwords are always scrubbed correctly. I'll post a 
> > > final
> > > version of the patch by the end of today if all goes to plan.
> > 
> > Great, thanks.  I think you're right that this is the best of all the
> > available options, fiddly though it is.  Perhaps we could write a final 
> > check
> > at the end of xm-test, to make sure that "vncpasswd" doesn't appear in the
> > logs anywhere -- that would make sure that this never regresses.
> 
> Attached is a final version of the patch to scrub passwords. I have tested
> it with HVM guests, and parvirt guests, using 'start', 'new', 'create',
> 'suspend', 'resume' commands to XM. In all cases, no password was present
> to the XenD log files created.
> 
>   Signed-off-by: Daniel P. Berrange <berrange@xxxxxxxxxx>

Applied, thanks.

Ewan.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel