[Kimchi-devel] [PATCH] issue #389: Use 127.0.0.1 as VNC listener IP

Crístian Viana vianac at linux.vnet.ibm.com
Fri Jul 25 20:27:53 UTC 2014


Reviewed-by: Crístian Viana <vianac at linux.vnet.ibm.com>

On 25-07-2014 17:02, alinefm at linux.vnet.ibm.com wrote:
> From: Aline Manera <alinefm at linux.vnet.ibm.com>
>
> When setting the listener IP to 0.0.0.0 anyone can connect to the freshly
> configured kimchi virtual machine manager box on port 5900, 5901, etc. and take
> over any virtual machine, since VNC is per default configured by kimchi
> to listen on all IPs.
> As websockets proxy connects to QEMU-VNC from 127.0.0.1 also set VNC
> listener IP to 127.0.0.1
>
> Signed-off-by: Aline Manera <alinefm at linux.vnet.ibm.com>




More information about the Kimchi-devel mailing list