(tvm) branch main updated: [DOCS] More clarity on security model of RPC server (#17382)

[yo...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

yongwww pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tvm.git


The following commit(s) were added to refs/heads/main by this push:
     new 660fd1e47e [DOCS] More clarity on security model of RPC server (#17382)
660fd1e47e is described below

commit 660fd1e47e32fc1a7614774601d1c2b8f746ac88
Author: Tianqi Chen <tq...@users.noreply.github.com>
AuthorDate: Thu Sep 19 10:29:34 2024 -0700

    [DOCS] More clarity on security model of RPC server (#17382)
    
    This PR updates the python docstrings to include
    more clarity on RPC server security model.
---
 python/tvm/rpc/__init__.py | 5 +++++
 python/tvm/rpc/server.py   | 5 +++++
 2 files changed, 10 insertions(+)

diff --git a/python/tvm/rpc/__init__.py b/python/tvm/rpc/__init__.py
index b64ba33d9e..91e042b55f 100644
--- a/python/tvm/rpc/__init__.py
+++ b/python/tvm/rpc/__init__.py
@@ -23,6 +23,11 @@ to run on remote runtime which don't have a compiler available.
 
 The test program compiles the program on local server,
 upload and run remote RPC server, get the result back to verify correctness.
+
+TVM RPC server assumes that the user is trusted and needs to be
+used in a trusted network environment and encrypted channels.
+It allows writings of arbitrary files into the server and provide
+full remote code execution capabilities to anyone who can access this API.
 """
 
 from .server import Server
diff --git a/python/tvm/rpc/server.py b/python/tvm/rpc/server.py
index 7c1a198562..63c0a92ab8 100644
--- a/python/tvm/rpc/server.py
+++ b/python/tvm/rpc/server.py
@@ -474,6 +474,11 @@ class Server(object):
 
     Note
     ----
+    TVM RPC server assumes that the user is trusted and needs to be
+    used in a trusted network environment and encrypted channels.
+    It allows writings of arbitrary files into the server and provide
+    full remote code execution capabilities to anyone who can access this API.
+
     The RPC server only sees functions in the tvm namespace.
     To bring additional custom functions to the server env, you can use server_init_callback.