On Wed, Sep 5, 2012 at 4:09 PM, Ingo Molnar <mingo@xxxxxxxxxx> wrote: > > * Pekka Enberg <penberg@xxxxxxxxxx> wrote: > >> On 08/24/2012 02:29 PM, Asias He wrote: >> >> It is useful to run a X program in guest and display it on host. >> >> >> >> 1) Make host's x server listen to localhost:6000 >> >> host_shell$ socat -d -d TCP-LISTEN:6000,fork,bind=localhost \ >> >> UNIX-CONNECT:/tmp/.X11-unix/X0 >> >> >> >> 2) Start the guest and run X program >> >> host_shell$ lkvm run -k /boot/bzImage >> >> guest_shell$ xlogo >> >> On Tue, Sep 4, 2012 at 4:07 PM, Avi Kivity <avi@xxxxxxxxxx> wrote: >> > Note, this is insecure, don't do this with untrusted guests. >> >> Asias, can we add a command line argument that enables this? >> It'd be safer to keep it disabled by default. > > It might also be prudent to name the option in a way that > signals that the user of it understands the security > implications: > > --X11-trusted-guest 1 > Yes. If we do something like the socat cmd does in step 1) above in lkvm, we need a option to enable that explicitly. -- Asias He -- To unsubscribe from this list: send the line "unsubscribe kvm" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
