tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED
authorJuergen Gross <jgross@suse.com>
Thu, 11 Jun 2020 14:12:41 +0000 (16:12 +0200)
committerHans van Kranenburg <hans@knorrie.org>
Tue, 15 Dec 2020 11:28:46 +0000 (12:28 +0100)
commit2f5fda31652f42f140ab56129e6fa3bcb90c7e52
tree5414bf81a240faa4f6fcee4ae3a09d6a75377182
parent82bfaf295647e5f670f78d9f9aad4a1d1268710b
tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED

The Xenstore command XS_IS_DOMAIN_INTRODUCED should be possible for
privileged domains only (the only user in the tree is the xenpaging
daemon).

Instead of having the privilege test for each command introduce a
per-command flag for that purpose.

This is part of XSA-115.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
Reviewed-by: Paul Durrant <paul@xen.org>
tools/xenstore/xenstored_core.c
tools/xenstore/xenstored_domain.c