From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:48191) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aJ7w1-0006kz-0R for qemu-devel@nongnu.org; Tue, 12 Jan 2016 18:01:10 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1aJ7vw-0004aR-0i for qemu-devel@nongnu.org; Tue, 12 Jan 2016 18:01:04 -0500 Received: from indium.canonical.com ([91.189.90.7]:34938) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1aJ7vv-0004aL-Rf for qemu-devel@nongnu.org; Tue, 12 Jan 2016 18:00:59 -0500 Received: from loganberry.canonical.com ([91.189.90.37]) by indium.canonical.com with esmtp (Exim 4.76 #1 (Debian)) id 1aJ7vu-0003WQ-UK for ; Tue, 12 Jan 2016 23:00:58 +0000 Received: from loganberry.canonical.com (localhost [127.0.0.1]) by loganberry.canonical.com (Postfix) with ESMTP id E12BD2E80C0 for ; Tue, 12 Jan 2016 23:00:58 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Date: Tue, 12 Jan 2016 22:54:35 -0000 From: pranith <697197@bugs.launchpad.net> Sender: bounces@canonical.com References: <20110104122142.23014.63077.malonedeb@gandwana.canonical.com> Message-Id: <20160112225437.28079.14400.launchpad@gac.canonical.com> Errors-To: bounces@canonical.com Subject: [Qemu-devel] [Bug 697197] Re: Empty password allows access to VNC in libvirt Reply-To: Bug 697197 <697197@bugs.launchpad.net> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: qemu-devel@nongnu.org ** Changed in: qemu Status: Confirmed =3D> Fix Released -- = You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/697197 Title: Empty password allows access to VNC in libvirt Status in libvirt: Unknown Status in QEMU: Fix Released Status in qemu-kvm: Unknown Status in libvirt package in Ubuntu: Invalid Status in qemu-kvm package in Ubuntu: Fix Released Status in libvirt source package in Lucid: Invalid Status in qemu-kvm source package in Lucid: Fix Released Status in libvirt source package in Maverick: Invalid Status in qemu-kvm source package in Maverick: Fix Released Status in libvirt source package in Natty: Invalid Status in qemu-kvm source package in Natty: Fix Released Status in libvirt source package in Karmic: Invalid Status in qemu-kvm source package in Karmic: Fix Released Status in qemu-kvm package in Debian: Fix Released Bug description: The help in the /etc/libvirt/qemu.conf states "To allow access without passwords, leave this commented out. An empty string will still enable passwords, but be rejected by QEMU effectively preventing any use of VNC." yet setting: vnc_password=3D"" allows access to the vnc console without any password prompt just as if it is hashed out completely. ProblemType: Bug DistroRelease: Ubuntu 10.10 Package: libvirt-bin 0.8.3-1ubuntu14 ProcVersionSignature: Ubuntu 2.6.35-24.42-server 2.6.35.8 Uname: Linux 2.6.35-24-server x86_64 Architecture: amd64 Date: Tue Jan 4 12:18:35 2011 InstallationMedia: Ubuntu-Server 10.04.1 LTS "Lucid Lynx" - Release amd64= (20100816.2) ProcEnviron: LANG=3Den_GB.UTF-8 SHELL=3D/bin/bash SourcePackage: libvirt To manage notifications about this bug go to: https://bugs.launchpad.net/libvirt/+bug/697197/+subscriptions