[Spice-devel] [PATCH spice-gtk] RFC: build-sys: remove the spice-controller library

Jeremy White jwhite at codeweavers.com
Thu Jun 22 16:46:31 UTC 2017


>>>>>
>>>>> I think we should try to solve this at the virt-viewer level, and move
>>>>> the
>>>>> discussion to virt-tools list.
>>>>>
>>>
>>> I guess a DBus interface could work equally well in this case?
>>>
>>
>> I'm not enough of an expert in DBus to say for sure, but I don't think
>> so.  One of the issues is that we need the communicated password to be
>> secure; can't you eavesdrop on a dbus channel with tools like dbus-monitor?
>>
> 
> Yes, you can, but you can also strace/attach a process reading from a unix socket.
> 

Fair point.  I guess I just have a moral objection to storing a password
in a plain text file.  If we can avoid that in some way, it will likely
work for our use case.

Cheers,

Jeremy


More information about the Spice-devel mailing list