Bug 693638

Summary: RFE: add the ability to filter agent messages, to disable copy and paste from the server
Product: Red Hat Enterprise Linux 6 Reporter: Hans de Goede <hdegoede>
Component: spice-serverAssignee: Hans de Goede <hdegoede>
Status: CLOSED ERRATA QA Contact: Desktop QE <desktop-qa-list>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 6.1CC: cmeadors, dblechte, djasa, mkenneth, uril
Target Milestone: rcKeywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: spice-server-0.8.1-1 Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 15:21:14 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 710200    
Bug Blocks: 693645    

Description Hans de Goede 2011-04-05 07:44:30 UTC
From a security pov copy and paste between the guest and the client is not always desirable. So we need to be able to enable/disable this. The best place to do this from an administration pov is on the hypervisor, and thus in the spice-server.

Comment 1 Hans de Goede 2011-04-05 07:45:51 UTC
This is implemented by these 2 upstream commits:
http://cgit.freedesktop.org/spice/spice/commit/?id=c2db6d1066bcb73c5ddf9e38c4ef30545706eae9
http://cgit.freedesktop.org/spice/spice/commit/?id=bcf9a60aa97419e12dc83916719e3633bfbb872f

Which are also present on the 0.8 branch, moving to post.

Comment 3 Cameron Meadors 2011-06-15 14:54:34 UTC
How is this being implemented?  Will there be an option for qemu-kvm?  If so, what would that be and how do we use it?  If this is already documented somewhere just point me to that.

Comment 4 Hans de Goede 2011-06-16 12:49:58 UTC
Hi,

(In reply to comment #3)
> How is this being implemented?  Will there be an option for qemu-kvm?

Yes

> If so, what would that be and how do we use it?

It will be an additional option to the -spice cmdline option, called
"disable-copy-paste"

So if for example you normally pass the following spice options:
qemu -spice port=5932,disable-ticketing

You would use the following to disable copy paste:
qemu -spice port=5932,disable-ticketing,disable-copy-paste

Also see bug 693645.

Regards,

Hans

Comment 7 errata-xmlrpc 2011-12-06 15:21:14 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1634.html