libxl: Cleanup: Have libxl__alloc_vdev use /libxl
authorIan Jackson <ian.jackson@eu.citrix.com>
Thu, 2 Jun 2016 15:10:30 +0000 (16:10 +0100)
committerWei Liu <wei.liu2@citrix.com>
Thu, 2 Jun 2016 15:34:58 +0000 (16:34 +0100)
commit624c8621764630e812154df9ce78d4f1eadfada1
tree53526d08177d810146c99ca0b0cda69c1ce1fbfb
parent2538aaa238aef15ade4e8a77db84691aea265693
libxl: Cleanup: Have libxl__alloc_vdev use /libxl

When allocating a vdev for a new disk, look in /libxl/device, rather
than the frontends directory in xenstore.

This is more in line with the other parts of libxl, which ought not to
trust frontends.  In this case, though, there is no security bug prior
to this patch because the frontend is the toolstack domain itself.

If libxl__alloc_vdev were ever changed to take a frontend domain
argument, this patch will fix a latent security bug.

This is a followup to XSA-175.

Signed-off-by: Ian Jackson <Ian.Jackson@eu.citrix.com>
Reviewed-by: Wei Liu <wei.liu2@citrix.com>
Release-acked-by: Wei Liu <wei.liu2@citrix.com>
tools/libxl/libxl.c