Re: [Xen-devel] Re: [Qemu-devel] [PATCH 12/13] set vnc password from xenstore.

[Jamie Lokier]

Avi Kivity wrote:
> Jamie Lokier wrote:
> >Avi Kivity wrote:
> >  
> >>Anthony Liguori wrote:
> >>    
> >>>> -vnc localhost:3,passwdfd=6
> >>>>        
> >>>In general, I strongly dislike passing file descriptors like this.
> >>>      
> >>I find this very useful, and actually think we should encourage it, and 
> >>also allow passing file descriptors over the monitor (using 
> >>SCM_RIGHTS).  This can help de-privilege qemu.  In fact, you can run a 
> >>guest where qemu doesn't even have permissions to open the backing file.
> >>    
> >
> >You can already do this:
> >
> >    qemu -hdc /proc/self/fd/3 3<>MS-DOS-6.22.img
> 
> Not over the monitor.

Oh, you're thinking of sending SCM_RIGHTS over the monitor..
Nice :-)

-- Jamie