* Pekka Enberg <penb...@kernel.org> wrote:

> On 08/24/2012 02:29 PM, Asias He wrote:
> >> It is useful to run a X program in guest and display it on host.
> >>
> >> 1) Make host's x server listen to localhost:6000
> >>    host_shell$ socat -d -d TCP-LISTEN:6000,fork,bind=localhost \
> >>                UNIX-CONNECT:/tmp/.X11-unix/X0
> >>
> >> 2) Start the guest and run X program
> >>    host_shell$ lkvm run -k /boot/bzImage
> >>   guest_shell$ xlogo
> 
> On Tue, Sep 4, 2012 at 4:07 PM, Avi Kivity <a...@redhat.com> wrote:
> > Note, this is insecure, don't do this with untrusted guests.
> 
> Asias, can we add a command line argument that enables this? 
> It'd be safer to keep it disabled by default.

It might also be prudent to name the option in a way that 
signals that the user of it understands the security 
implications:

        --X11-trusted-guest 1

or so.

Thanks,

        Ingo
--
To unsubscribe from this list: send the line "unsubscribe kvm" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to