Commit d4970b07 authored by Hans de Goede's avatar Hans de Goede Committed by Gerd Hoffmann
Browse files

spice: add option for disabling copy paste support 

Some people want to be able disable spice's guest <-> client copy paste support
because of security considerations.

[ kraxel: drop old-version error message ]
parent 35106c2d

qemu-config.c

+3 −0
Original line number Diff line number Diff line
@@ -384,6 +384,9 @@ QemuOptsList qemu_spice_opts = { 
        },{

            .name = "disable-ticketing",

            .type = QEMU_OPT_BOOL,

        },{

            .name = "disable-copy-paste",

            .type = QEMU_OPT_BOOL,

        },{

            .name = "x509-dir",

            .type = QEMU_OPT_STRING,

qemu-options.hx

+3 −0
Original line number Diff line number Diff line
@@ -717,6 +717,9 @@ Set the password you need to authenticate. 
@item disable-ticketing

Allow client connects without authentication.



@item disable-copy-paste

Disable copy paste between the client and the guest.



@item tls-port=<nr>

Set the TCP port spice is listening on for encrypted channels.

ui/spice-core.c

+6 −0
Original line number Diff line number Diff line
@@ -554,6 +554,12 @@ void qemu_spice_init(void) 
        spice_server_set_noauth(spice_server);

    }



#if SPICE_SERVER_VERSION >= 0x000801

    if (qemu_opt_get_bool(opts, "disable-copy-paste", 0)) {

        spice_server_set_agent_copypaste(spice_server, false);

    }

#endif



    compression = SPICE_IMAGE_COMPRESS_AUTO_GLZ;

    str = qemu_opt_get(opts, "image-compression");

    if (str) {