Hello, the INSTALL file in the VDR source code says:
WARNING: DUE TO THE OPEN SVDRP PORT THIS PROGRAM MAY CONSTITUTE A
======= POTENTIAL SECURITY HAZARD! IF YOU ARE NOT RUNNING VDR IN
A CONTROLLED ENVIRONMENT, YOU MAY WANT TO DISABLE SVDRP
BY USING '--port=0'!
This is a solution, but it also makes it impossible to use svdrpsend.pl on the
local VDR and so makes scripts fail, which want to send status messages to VDR
and makes it impossible to to remap the power key to call "svdrpsend.pl HITK
POWER".
A much better solution would be to allow to just open the SVDRP port on
"localhost", so only local software is able to use it and the port is not
accessible from network.
I've attached a patch, which makes the following command line a valid command
line for VDR:
vdr -p 127.0.0.1:2001
Any other IP may be specified, too, for example to get VDR to listen only on
one NIC on a machine with multiple NICs.
The patch is only a proof of concept. It uses a global variable to hold the IP,
as this was the minimally invasive way to modify VDR. This should be modified
in a final version of the patch. I'll make a nicer version, if Klaus thinks,
that this feature may be interesting for VDR. The patch can be applied to VDR
1.6.0-2 with or without extensions patch and VDR 1.7.10. I didn't try 1.7.11,
but most probably the patch will work there, too.
Yours
Manuel Reimer
--
() ascii ribbon campaign - against html mail
/\ - gegen HTML-Mail
answers as html mail will be deleted automatically!
Antworten als HTML-Mail werden automatisch gelöscht!
Jetzt kostenlos herunterladen: Internet Explorer 8 und Mozilla Firefox 3.5 -
sicherer, schneller und einfacher! http://portal.gmx.net/de/go/chbrowser
vdr-1.6.0-2_setip.diff
Description: Binary data
_______________________________________________ vdr mailing list vdr@linuxtv.org http://www.linuxtv.org/cgi-bin/mailman/listinfo/vdr
