1) Instead of a set of predefined commands, we send MSG_AGENT_TO_SERVER_TRIGGER_CONNECT_EXISTING msg with a parameter (e.g. "org.qubes-os.vm.Filecopy") defining required action 2) qrexec_daemon just forks qrexec_policy, that will take care of actually allowing and executing required action 3) after MSG_AGENT_TO_SERVER_TRIGGER_CONNECT_EXISTING, qrexec_agent does not execute a command - it justs uses already established file descriptors to send data to/from. Thus, there is no need to use ~/.xxxxxspool - a command line tool can have direct access to remote fds. |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| buffer.c | ||
| buffer.h | ||
| exec.c | ||
| glue.h | ||
| Makefile | ||
| qrexec_agent.c | ||
| qrexec_client.c | ||
| qrexec_daemon.c | ||
| qrexec.h | ||
| txrx-vchan.c | ||
| unix_server.c | ||
| write_stdin.c | ||