Added a hosts-allow facility to TCP connections, which allows us to restrict
authoremellor@leeni.uk.xensource.com <emellor@leeni.uk.xensource.com>
Mon, 12 Dec 2005 16:43:48 +0000 (16:43 +0000)
committeremellor@leeni.uk.xensource.com <emellor@leeni.uk.xensource.com>
Mon, 12 Dec 2005 16:43:48 +0000 (16:43 +0000)
commit03bbc8cec68eab2973ae491f44bab08dd039f939
treeefa907c12763e28b6e1d806cc3a0f518ab4b5022
parent91da6b2f1cfbf6e8c96a47a9fe659dc698fe59d0
Added a hosts-allow facility to TCP connections, which allows us to restrict
the acceptable connections based upon a regular expression comparison with the
FQDN or the IP address.

Use the hosts-allow facility to restrict access to the relocation socket.  This
adds the configuration option xend-relocation-hosts-allow, which takes a
space-separated sequence of regular expressions.

Pass the protocol class instance through to SocketServerConnection, rather than
a new instance of that class.  This means that the new instance need not be
passed through SocketListener.acceptConnection.

Make the SocketServerConnection and SocketListener classes start their
corresponding threads and open their sockets (in the case of SocketListener)
automatically.  This means that callers do not need to save an instance locally,
just to call run() or listen() on it.  This also means that listenTCP and
listenUnix can go -- simply creating a TCPListener or UnixListener instance is
sufficient.

Signed-off-by: Ewan Mellor <ewan@xensource.com>
tools/python/xen/web/connection.py
tools/python/xen/web/tcp.py
tools/python/xen/web/unix.py
tools/python/xen/xend/XendRoot.py
tools/python/xen/xend/server/relocate.py