Re: [Qemu-devel] [PATCH] let management expire vnc password

[Anthony Liguori]

Dan Kenigsberg wrote:
> The rationale is central management of access to virtual machines.
>
> Normally, no vnc access to VMs is allowed. A user with enough
> credentials may request the management tool for a short-lived
> "ticket" to connect to a VM. If the user uses it, great. But after the
> ticket expires, no further connections are allowed.
>   

Couldn't you implement the same feature with an IP tables rule (prevent 
new connections from being established)?

I'm not convinced this functionality is very useful generally so I think 
I'd prefer not to merge it.

Regards,

Anthony Liguori