On 05/16/2018 05:51 PM, [email protected] wrote:
Hello All,Often used the -p or -pass-io option in the past and wanted to get some deeper knowlege how this actually works, if or what xen based techniques are behind it and so on. Sadly the only thing i found was: "Pass stdin/stdout/stderr from remote program". In some forums they talked about opening something like a io-tunnel to pass trough the Dom0. (When using qvm-run -p to transfer files between appvms) If someone knows a bit more than this or can confirm and explain that tunnel thing to me, i would be very pleased.
Good question, but I guess the code itself will provide the best answers. You'll probably have to have a closer look at the qrexec framework. [1]You shouldn't use -p without some caution in your scripts though as passing stdin can lead to unexpected leaks from dom0 to an AppVM.
So if you don't need stdin passing, it would be good practice to use qvm-run -p [..] < /dev/null [2] [1] https://www.qubes-os.org/doc/qrexec3/ [2] https://github.com/QubesOS/qubes-issues/issues/3074 -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/ef1dbd98-deb6-d070-b8c8-f0423b775627%40hackingthe.net. For more options, visit https://groups.google.com/d/optout.
smime.p7s
Description: S/MIME Cryptographic Signature
