xenstored: Only dom0 can do XS_DEBUG in non-test environments.

Signed-off-by: Keir Fraser <keir@xensource.com>

diff --git a/tools/xenstore/xenstored_core.c b/tools/xenstore/xenstored_core.c
index 461395832a956d521266e284be45743c23959b0e..d1288842217ac0a03c80ed0f49b027bd1798291f 100644 (file)
--- a/tools/xenstore/xenstored_core.c
+++ b/tools/xenstore/xenstored_core.c
@@ -1163,6 +1163,13 @@ static void do_debug(struct connection *conn, struct buffered_data *in)
 {
        int num;
 
+#ifndef TESTING
+       if (conn->id != 0) {
+               send_error(conn, EACCES);
+               return;
+       }
+#endif
+
        num = xs_count_strings(in->buffer, in->used);
 
        if (streq(in->buffer, "print")) {