tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED
authorJuergen Gross <jgross@suse.com>
Tue, 15 Dec 2020 12:34:45 +0000 (13:34 +0100)
committerJan Beulich <jbeulich@suse.com>
Tue, 15 Dec 2020 12:34:45 +0000 (13:34 +0100)
commitfa2307be61df52970e7ee47a6c55124155c173c6
tree716549e713cb2563e7e57667d3102f386f98c569
parentd3f8c086d23d886e2f5357b096bfefd5c8e5bcc4
tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED

The Xenstore command XS_IS_DOMAIN_INTRODUCED should be possible for
privileged domains only (the only user in the tree is the xenpaging
daemon).

Instead of having the privilege test for each command introduce a
per-command flag for that purpose.

This is part of XSA-115.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
Reviewed-by: Paul Durrant <paul@xen.org>
tools/xenstore/xenstored_core.c
tools/xenstore/xenstored_domain.c