[pve-devel] [PATCH qemu-server] restrict monitor API call to Sys.Modify

Wolfgang Link w.link at proxmox.com
Mon Nov 7 08:37:45 CET 2016


We could restrict the monitor to the info commands, then they give only
information about this VM and can't change the setting of it.


On 11/07/2016 08:27 AM, Dietmar Maurer wrote:
>> The idea was to keep VM.Monitor like it used to be for the new Qemu Guest
>> Agent functionality proposed by Wolfgang, because that just allows harmless
>> operations relating directly to the VM.
> 
> Monitor an Agent is something completely different from the security point...
> Any VM user should b e able to run Agent commands?
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
> 




More information about the pve-devel mailing list