bitkeeper revision 1.505 (3f88123avJcxOfXCNp2EJ21JBegFRg)

xen-mkdevnodes:
  Create the xvd device nodes with permissions 600 to be totally sure we don't give users direct-access privilege.

diff --git a/tools/misc/xen-mkdevnodes b/tools/misc/xen-mkdevnodes
index 37c94de87254863b04220beccacb47a93568f019..944ffcc34a34a10af1a65df8df55512eb025c253 100755 (executable)
--- a/tools/misc/xen-mkdevnodes
+++ b/tools/misc/xen-mkdevnodes
@@ -12,8 +12,10 @@ PARTITIONS="1 2 3 4 5 6 7 8 9 10 11 12 13 14 15"
 j=0
 for l in ${LETTERS}; do
     mknod ${BASE}/xvd${l} b 125 ${j}
+    chmod 600 ${BASE}/xvd${l}
     for i in ${PARTITIONS}; do
         mknod ${BASE}/xvd${l}${i} b 125 $(($i+$j))
+        chmod 600 ${BASE}/xvd${l}${i}
     done
     j=$(($j+16))
 done