From d90022cc8f831ae77acdf305d26cb52eb5d46c35 Mon Sep 17 00:00:00 2001 From: tqchen Date: Mon, 16 Sep 2024 09:47:27 -0400 Subject: [PATCH 1/2] [DOCS] Update document to include security model of RPC server This PR update the documents to include the security model of the RPC server. --- docs/reference/security.rst | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/reference/security.rst b/docs/reference/security.rst index c2603dd33ee5..de3921716ac2 100644 --- a/docs/reference/security.rst +++ b/docs/reference/security.rst @@ -34,10 +34,15 @@ The private security mailing address is: `security@apache.org `_. -Considerations +Security Model -------------- The default binary generated by TVM only relies on a minimum runtime API. The runtime depends on a limited set of system calls(e.g. malloc) in the system library. + +TVM RPC server assumes that the user is trusted and needs to be used in a trusted network environment +and encrypted channels. It allows writings of arbitrary files into the server for benchmarking purposes. + + AutoTVM data exchange between the tracker, server and client are in plain-text. It is recommended to use them under trusted networking environment or encrypted channels. From 5c53e85923202c274c886c270b811f1ded2d1bc4 Mon Sep 17 00:00:00 2001 From: tqchen Date: Mon, 16 Sep 2024 10:11:41 -0400 Subject: [PATCH 2/2] More clarification about RCE --- docs/reference/security.rst | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/docs/reference/security.rst b/docs/reference/security.rst index de3921716ac2..6093063bd98e 100644 --- a/docs/reference/security.rst +++ b/docs/reference/security.rst @@ -41,7 +41,8 @@ The runtime depends on a limited set of system calls(e.g. malloc) in the system TVM RPC server assumes that the user is trusted and needs to be used in a trusted network environment -and encrypted channels. It allows writings of arbitrary files into the server for benchmarking purposes. +and encrypted channels. It allows writings of arbitrary files into the server and provide +full remote code execution capabilities to anyone who can access this API. AutoTVM data exchange between the tracker, server and client are in plain-text.