Glenn Faden wrote:

> Once we have support for suspend and resume on laptops people will 
> expect to be able to suspend
> their desktop sessions and resume them later from a different location. 
> This implies that
> the X server needs to be bound to a static interface. The loopback 
> interface is static, but
> cannot be used to serve clients in non-global zones. A better 
> alternative is to have persistent
> services such as X11 (that should work across suspend/resume) by binding 
> to vni0 instead of lo0.
> That implies that vni0 should be plumbed automatically in this scenario.

Glenn,

If the concern is X11, then why don't we expand AF_UNIX and named pipes 
so that the admin of the X server (in the global zone) can choose to 
have  /tmp/.X11-pipe/X0 and /tmp/.X11-uni/X0 be loopback mounted in 
other zones?

There might be security environments where one wants X11 to work between 
different zones on the machine, yet do not want *any* IP connectivity 
between those zones.

    Erik

Reply via email to