Page MenuHomePhabricator

Host<->guest clipboard for KVM gateway is default on, should be off
Closed, WontfixPublic

Description

For KVM gateway, the XML file needs to have the clipboard set to off for the gateway (it is default on currently for 13.0.0.1.1) . Klipper in the gateway sits there collecting the entire contents of everything copy-pasted in the host. Also, Klipper really shouldn't auto-start in the gateway, and probably not in the workstation; it just makes clipboard history that much easier to access for exploit.

Details

Impact
High

Event Timeline

HawKing triaged this task as High priority.Sep 5 2016, 7:29 PM
HawKing raised the priority of this task from High to Needs Triage.

Hello HawKing. The reason we decided to enable it for the gateway is because it makes it easier to paste bridge addresses. The GW is considered part of the trusted computing base and if it isn't you will have much bigger problems that it just seeing clipboard input.

HulaHoop claimed this task.