|
From: | Anthony Liguori |
Subject: | Re: [Qemu-devel] [PATCH] mark nic as trusted |
Date: | Wed, 07 Jan 2009 11:54:29 -0600 |
User-agent: | Thunderbird 2.0.0.19 (X11/20090105) |
Anthony Liguori wrote:
That is for secure guest<->host communication over network. Guest has to know somehow which link host uses for communication. If guest has no wayto know this, another computer on untrusted network can pretend it is real host and "own" a guest.So this is for vmchannel? How do you differentiate a real device with that bit set compared to the vmchannel device?
Like if you were doing PCI passthrough of an e1000... Regards, Anthony Liguori
Regards, Anthony Liguori-- Gleb.
[Prev in Thread] | Current Thread | [Next in Thread] |