Oh ... You see... They hack into root on your perhaps insecure Linux systems and know enough about your network & your VM system to issue the appropriate 'vmcp def nic' and couple commands.
Apparently its *someone*'s requirement, but I agree, and optional open Vswitch would be handy indeed. I get bit very often when I forget when I'm renaming machines (that's one of the coolest things about Linux on VM - oh, well, let me just put this server aside and give you one like *this* - oh, problem?, vmsecure rename them back). I did submit a requirement once upon a time. Marcy "This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose, or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation." -----Original Message----- From: Linux on 390 Port [mailto:[email protected]] On Behalf Of RPN01 Sent: Thursday, April 16, 2009 12:40 PM To: [email protected] Subject: Re: [LINUX-390] vswitch for everyone That would be my desire as well, but IBM says it is what it is for security reasons. Evidently, a rogue Linux guest could appear on your system, connect to the vSwitch and reek havoc on your network. Nobody's ever told me where this rogue image is supposed to come from, and in our case, there are only four "people" users allowed on either of our systems. Having an open vSwitch would be handy, or just a way to grant * or grant all. The way it is now is such a pain. -- Robert P. Nix Mayo Foundation .~. RO-OE-5-55 200 First Street SW /V\ 507-284-0844 Rochester, MN 55905 /( )\ ----- ^^-^^ "In theory, theory and practice are the same, but in practice, theory and practice are different." On 4/15/09 3:26 AM, "Andrew Avramenko" <[email protected]> wrote: > Colleagues, > > > Does anybody know is it possible to create vswitch which will be > unaware to access permissions, so every guest can connect to it and I > don't need to run modify vswitch grant access every time? > > Thank You in advance. > > > > > -- > With best regards, > Andrew > > ---------------------------------------------------------------------- > For LINUX-390 subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO LINUX-390 or > visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390 ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
