Re: [Spice-devel] [spice-gtk] Add --spice-disable-clipboard option

2018-02-20 Thread Christophe Fergeau
On Tue, Feb 20, 2018 at 12:48:48PM +0100, Victor Toso wrote: > On Thu, Jan 18, 2018 at 10:31:26AM +0100, Christophe Fergeau wrote: > > At least on X.org, malicious code could run the equivalent of "watch > > xsel -o --clipboard" in a VM, and would then be able to track all the > > clipboard

Re: [Spice-devel] [spice-gtk] Add --spice-disable-clipboard option

2018-02-20 Thread Victor Toso
On Thu, Jan 18, 2018 at 10:31:26AM +0100, Christophe Fergeau wrote: > At least on X.org, malicious code could run the equivalent of "watch > xsel -o --clipboard" in a VM, and would then be able to track all the > clipboard content, even when the spice-gtk widget is not focused. > > At the moment,

Re: [Spice-devel] [spice-gtk] Add --spice-disable-clipboard option

2018-02-19 Thread Christophe Fergeau
On Thu, Jan 18, 2018 at 12:13:45PM +0100, Christophe Fergeau wrote: > On Thu, Jan 18, 2018 at 12:06:34PM +0100, Marc-André Lureau wrote: > > Hi > > > > On Thu, Jan 18, 2018 at 10:31 AM, Christophe Fergeau > > wrote: > > > At least on X.org, malicious code could run the

Re: [Spice-devel] [spice-gtk] Add --spice-disable-clipboard option

2018-01-18 Thread Christophe Fergeau
On Thu, Jan 18, 2018 at 12:06:34PM +0100, Marc-André Lureau wrote: > Hi > > On Thu, Jan 18, 2018 at 10:31 AM, Christophe Fergeau > wrote: > > At least on X.org, malicious code could run the equivalent of "watch > > xsel -o --clipboard" in a VM, and would then be able to

Re: [Spice-devel] [spice-gtk] Add --spice-disable-clipboard option

2018-01-18 Thread Marc-André Lureau
Hi On Thu, Jan 18, 2018 at 10:31 AM, Christophe Fergeau wrote: > At least on X.org, malicious code could run the equivalent of "watch > xsel -o --clipboard" in a VM, and would then be able to track all the > clipboard content, even when the spice-gtk widget is not focused. >