> >> > Why is this needed?
> > Security? I don't want that another process can write nonsense into my
> backup.
> 
> They can already write nonsense to your iSCSI target, can't they?

I am more concerned about software bugs. You need to find a free port, and 
then pass that port to kvm. If the original server dies, it is likely that 
another
process start using the same port ...

> But you can always sandbox using SELinux, if you care about that, or use a 
> Unix
> socket + SCM_CREDENTIALS.

unix sockets works with qemu nbd code?


Reply via email to