tools/ocaml/xenstored: check privilege for XS_IS_DOMAIN_INTRODUCED
authorEdwin Török <edvin.torok@citrix.com>
Tue, 15 Dec 2020 11:28:56 +0000 (12:28 +0100)
committerHans van Kranenburg <hans@knorrie.org>
Tue, 15 Dec 2020 11:28:56 +0000 (12:28 +0100)
commitaaf56fd686241f613e2aa6841e4e9068bdf3a90b
treebfe77b2bba1006487397752f14eb479064a2e91a
parent4280882c9b749c28632b3ca3a32a057e9b5f4ec6
tools/ocaml/xenstored: check privilege for XS_IS_DOMAIN_INTRODUCED

The Xenstore command XS_IS_DOMAIN_INTRODUCED should be possible for privileged
domains only (the only user in the tree is the xenpaging daemon).

This is part of XSA-115.

Signed-off-by: Edwin Török <edvin.torok@citrix.com>
Acked-by: Christian Lindig <christian.lindig@citrix.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
tools/ocaml/xenstored/process.ml