Izik Eidus wrote:
I want to add that qemu is not the sole user of spice, Spice will be
used as a protocol to connect into physical windows/linux machines....
So how can we change the library just for qemu?
A library is not necessarily a problem.
What would be a probably is if the library maintains guest visible
state. There are a lot of advantages to keeping qemu as the sole
maintainer of guest visible state as it simplifies things like live
migration. More importantly, it allows us to do things like Avi's
suggested security sandboxing using seccomp(). For that to work, we
need to make sure that we can isolate any code that interacts directly
with the guest.
Regards,
Anthony Liguori
