[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Xen-API] dom0 console



Good day.

Why dom0 is creating automatic login session with root privileges on it own console? (I mean /dev/xvc0?).

Any guy, who was able to get non-root access to dom0 will be able easily get root access to dom0 via 'xvncviewer localhost:5900'.

Is any REAL reason to have password-unprotected console, avaible to anyone on dom0?

_______________________________________________
xen-api mailing list
xen-api@xxxxxxxxxxxxx
http://lists.xen.org/cgi-bin/mailman/listinfo/xen-api


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.