qrexec: clarify when pipes and when vchan is used, add note about loopback vchan

QubesOS/qubes-issues#4583
This commit is contained in:
Marek Marczykowski-Górecki 2018-12-08 22:37:44 +01:00
parent d3f51685d8
commit 793928e7b1
No known key found for this signature in database
GPG Key ID: F32894BE9684938A

View File

@ -361,8 +361,9 @@ qrexec v2, see [here](/doc/qrexec2/#qubes-rpc-internals).*)
Qrexec framework consists of a number of processes communicating with each
other using common IPC protocol (described in detail below). Components
residing in the same domain use pipes as the underlying transport medium,
while components in separate domains use vchan link.
residing in the same domain (`qrexec-client-vm` to `qrexec-agent`, `qrexec-client` to `qrexec-daemon`) use pipes as the underlying transport medium,
while components in separate domains (`qrexec-daemon` to `qrexec-agent`, data channel between `qrexec-agent`s) use vchan link.
Because of [vchan limitation](https://github.com/qubesos/qubes-issues/issues/951), it is not possible to establish qrexec connection back to the source domain.
## Dom0 tools implementation ##