[pve-devel] [PATCH qemu-server] restrict monitor API call to Sys.Modify

[Wolfgang Link]

We could restrict the monitor to the info commands, then they give only
information about this VM and can't change the setting of it.


On 11/07/2016 08:27 AM, Dietmar Maurer wrote:
>> The idea was to keep VM.Monitor like it used to be for the new Qemu Guest
>> Agent functionality proposed by Wolfgang, because that just allows harmless
>> operations relating directly to the VM.
> 
> Monitor an Agent is something completely different from the security point...
> Any VM user should b e able to run Agent commands?
> 
> _______________________________________________
> pve-devel mailing list
> pve-devel at pve.proxmox.com
> http://pve.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
>