UML BuilderSecurityThere are two risks. The first is that the control script automatically runs xhost +ipdaddr to allow the guest to access your main X server. If other people can use the guest, then they will also be able to access your X server. You can stop this behaviour by commenting out the relevant lines in the control script, and manually setting up xauth based X authentication yourself. The second is that uml_net currently allows any user to request any IP address they want. Hopefully someone will implement an access control mechanism so that ordinary users can't purposefully or accidentally use addresses they shouldn't. uml_net is a helper binary that is part of UML, and establishes the host side networking. |