x86: remove IS_PRIV access check bypasses
authorDaniel De Graaf <dgdegra@tycho.nsa.gov>
Thu, 18 Apr 2013 15:01:45 +0000 (17:01 +0200)
committerJan Beulich <jbeulich@suse.com>
Thu, 18 Apr 2013 15:01:45 +0000 (17:01 +0200)
commit764012376a096a45bced88ee2ec1a6c17c6c22c7
tree2881ecaf60a14d78fa122aaa697dec29060888de
parentd8b5421f45c2b528bab1c8695271f99743b708fa
x86: remove IS_PRIV access check bypasses

Several domctl functions dealing with rangesets contain a short-circuit
bypass if the domain is privileged. Since the construction of domain 0
permits access to all I/O ranges, the call to irq_access_permitted will
normally return true even without the IS_PRIV check, and the presence of
the IS_PRIV check prevents the creation of a privileged domain without
access to specific devices or IO memory ranges.

Signed-off-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>
xen/arch/x86/domctl.c
xen/arch/x86/irq.c