Jan Beulich d9c91ccdcd domctl: relax getdomaininfo permissions ...

Qemu needs access to this for the domain it controls, both due to it
being used by xc_domain_memory_mapping() (which qemu calls) and the
explicit use in hw/xenpv/xen_domainbuild.c:xen_domain_poll(). Extend
permissions to that of any "ordinary" domctl: A domain controlling the
targeted domain can invoke this operation for that target domain (which
is being achieved by no longer passing NULL to xsm_domctl()).

This at once avoids a for_each_domain() loop when the ID of an
existing domain gets passed in.

Reported-by: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com>
Signed-off-by: Jan Beulich <jbeulich@suse.com>
Reviewed-by: Andrew Cooper <andrew.cooper3@citrix.com>
Acked-by: Daniel De Graaf <dgdegra@tycho.nsa.gov>

2016-08-17 15:31:56 +02:00

..

policy

domctl: relax getdomaininfo permissions

2016-08-17 15:31:56 +02:00

utils

loadpolicy: only close polFd if it is valid

2016-02-29 10:48:49 -05:00

Makefile

tools: fix "make distclean"

2015-01-27 16:34:45 +00:00