[Spice-devel] [PATCH spice-gtk] RFC: build-sys: remove the spice-controller library
Jeremy White
jwhite at codeweavers.com
Thu Jun 22 16:46:31 UTC 2017
>>>>>
>>>>> I think we should try to solve this at the virt-viewer level, and move
>>>>> the
>>>>> discussion to virt-tools list.
>>>>>
>>>
>>> I guess a DBus interface could work equally well in this case?
>>>
>>
>> I'm not enough of an expert in DBus to say for sure, but I don't think
>> so. One of the issues is that we need the communicated password to be
>> secure; can't you eavesdrop on a dbus channel with tools like dbus-monitor?
>>
>
> Yes, you can, but you can also strace/attach a process reading from a unix socket.
>
Fair point. I guess I just have a moral objection to storing a password
in a plain text file. If we can avoid that in some way, it will likely
work for our use case.
Cheers,
Jeremy
More information about the Spice-devel
mailing list