tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED
authorJuergen Gross <jgross@suse.com>
Thu, 11 Jun 2020 14:12:41 +0000 (16:12 +0200)
committerJan Beulich <jbeulich@suse.com>
Tue, 15 Dec 2020 13:05:58 +0000 (14:05 +0100)
commit91992c72ed55185de07f44aacee499954143c9f3
tree1d68a31f07b2d084bab85e5f9f7c97c0ff8e8668
parent4e298fa40781231ddc3f17e3e14e869c1c591722
tools/xenstore: check privilege for XS_IS_DOMAIN_INTRODUCED

The Xenstore command XS_IS_DOMAIN_INTRODUCED should be possible for
privileged domains only (the only user in the tree is the xenpaging
daemon).

Instead of having the privilege test for each command introduce a
per-command flag for that purpose.

This is part of XSA-115.

Signed-off-by: Juergen Gross <jgross@suse.com>
Reviewed-by: Julien Grall <jgrall@amazon.com>
Reviewed-by: Paul Durrant <paul@xen.org>
tools/xenstore/xenstored_core.c
tools/xenstore/xenstored_domain.c