This is an automated email from the ASF dual-hosted git repository.
yongwww pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tvm.git
The following commit(s) were added to refs/heads/main by this push:
new 660fd1e47e [DOCS] More clarity on security model of RPC server (#17382)
660fd1e47e is described below
commit 660fd1e47e32fc1a7614774601d1c2b8f746ac88
Author: Tianqi Chen <[email protected]>
AuthorDate: Thu Sep 19 10:29:34 2024 -0700
[DOCS] More clarity on security model of RPC server (#17382)
This PR updates the python docstrings to include
more clarity on RPC server security model.
---
python/tvm/rpc/__init__.py | 5 +++++
python/tvm/rpc/server.py | 5 +++++
2 files changed, 10 insertions(+)
diff --git a/python/tvm/rpc/__init__.py b/python/tvm/rpc/__init__.py
index b64ba33d9e..91e042b55f 100644
--- a/python/tvm/rpc/__init__.py
+++ b/python/tvm/rpc/__init__.py
@@ -23,6 +23,11 @@ to run on remote runtime which don't have a compiler
available.
The test program compiles the program on local server,
upload and run remote RPC server, get the result back to verify correctness.
+
+TVM RPC server assumes that the user is trusted and needs to be
+used in a trusted network environment and encrypted channels.
+It allows writings of arbitrary files into the server and provide
+full remote code execution capabilities to anyone who can access this API.
"""
from .server import Server
diff --git a/python/tvm/rpc/server.py b/python/tvm/rpc/server.py
index 7c1a198562..63c0a92ab8 100644
--- a/python/tvm/rpc/server.py
+++ b/python/tvm/rpc/server.py
@@ -474,6 +474,11 @@ class Server(object):
Note
----
+ TVM RPC server assumes that the user is trusted and needs to be
+ used in a trusted network environment and encrypted channels.
+ It allows writings of arbitrary files into the server and provide
+ full remote code execution capabilities to anyone who can access this API.
+
The RPC server only sees functions in the tvm namespace.
To bring additional custom functions to the server env, you can use
server_init_callback.
