Re: [Nbd] [Qemu-devel] Transforming stdin and stdout pair into a socket
- To: "Ciprian Dorin, Craciun" <ciprian.craciun@...17...>
- Cc: nbd-general@lists.sourceforge.net, linux-newbie@...25..., qemu-devel@...530..., Anthony Liguori <anthony@...533...>
- Subject: Re: [Nbd] [Qemu-devel] Transforming stdin and stdout pair into a socket
- From: Wouter Verhelst <w@...112...>
- Date: Mon, 11 May 2009 21:31:55 +0200
- Message-id: <20090511193155.GO12606@...172...>
- In-reply-to: <8e04b5820905110632q1a3b9ad4u49d4f3208d994755@...18...>
- References: <8e04b5820905101119u39ae84bfp1bae24be6e057086@...18...> <4A0813D6.3050609@...533...> <8e04b5820905110632q1a3b9ad4u49d4f3208d994755@...18...>
On Mon, May 11, 2009 at 04:32:26PM +0300, Ciprian Dorin, Craciun wrote:
> About the other solution with SSH port forwarding, I don't really
> like it, because it has some security implications: any process on the
> local machine can access the block device...
That's still the case even if you do not use SSH port forwarding; NBD
does not actually implement anything remotely resembling security at
this point.
I've had plans to implement username/password authentication in
nbd-server and nbd-client, and there's even an implementation floating
around somewhere (written by someone else), but it still needs some work
and isn't finished. Additionally, I'd have to be able to get a patch
into qemu-nbd.c so that it'd support that kind of authentication, too.
--
<Lo-lan-do> Home is where you have to wash the dishes.
-- #debian-devel, Freenode, 2004-09-22
Reply to: