commit 80329de43718a4133c64575c7ffaeac9f4871bde
author Nicolas Norvez <norvez@chromium.org> Mon Mar 27 14:32:24 2017 -0700
committer chrome-bot <chrome-bot@chromium.org> Wed Aug 02 12:47:53 2017 -0700
tree c715478acbc82aaf4cc822de778d9c7dc36e2636
parent 2b66b9a1f7d663a2d7d8da2b42b2dfc9633dde4c

cros_vm: only forward local ssh connnections to guest

Don't forward all incoming connections to port 9222 to the guest, only
the ones coming from localhost since VMs often run with known
testing_rsa key.

BUG=chromium:627487
TEST=./bin/cros_run_vm_test --start-vm --image-path=xxxx

Change-Id: I72da2645cdf16423d6e72546fe126fe1e3fec8af
Reviewed-on: https://chromium-review.googlesource.com/461379
Commit-Ready: Nicolas Norvez <norvez@chromium.org>
Tested-by: Nicolas Norvez <norvez@chromium.org>
Reviewed-by: Mike Frysinger <vapier@chromium.org>

scripts/cros_vm.py

diff --git a/scripts/cros_vm.py b/scripts/cros_vm.py
index 503f46d..ee414c7 100644
--- a/scripts/cros_vm.py
+++ b/scripts/cros_vm.py
@@ -143,7 +143,7 @@
             '-serial', 'file:%s' % self.kvm_serial,
             '-mon', 'chardev=control_pipe',
             '-net', 'nic,model=virtio',
-            '-net', 'user,hostfwd=tcp::%d-:22' % self.ssh_port,
+            '-net', 'user,hostfwd=tcp:127.0.0.1:%d-:22' % self.ssh_port,
             '-drive', 'file=%s,index=0,media=disk,cache=unsafe'
             % self.image_path]
     if self.enable_kvm: