[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Qemu-devel] [PATCH] mark nic as trusted

From: Anthony Liguori
Subject: Re: [Qemu-devel] [PATCH] mark nic as trusted
Date: Wed, 07 Jan 2009 13:26:05 -0600
User-agent: Thunderbird (X11/20090105)

Gleb Natapov wrote:
On Wed, Jan 07, 2009 at 11:54:29AM -0600, Anthony Liguori wrote:
Anthony Liguori wrote:
That is for secure guest<->host communication over network. Guest has to
know somehow which link host uses for communication. If guest has no way
to know this, another computer on untrusted network can pretend it is real host and "own" a guest.
So this is for vmchannel? How do you differentiate a real device with that bit set compared to the vmchannel device?
Like if you were doing PCI passthrough of an e1000...

It's not just one bit. It is 14 byte string. We can put something unique there.

This is for vmchannel?  Why not add a feature to virtio-net?


Anthony Liguori

reply via email to

[Prev in Thread] Current Thread [Next in Thread]