Fix permissions checks for virDomainGetTime/Hostname

[libvirt] [PATCH 0/2] Fix permissions checks for virDomainGetTime/Hostname

Daniel P. Berrangé posted 2 patches 5 years ago

Download series mbox

Test syntax-check passed

Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/20190403140050.17666-1-berrange@redhat.com

src/libvirt-domain.c         | 2 ++
src/remote/remote_protocol.x | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)

Expand all Fold all

[libvirt] [PATCH 0/2] Fix permissions checks for virDomainGetTime/Hostname

Posted by Daniel P. Berrangé 5 years ago

These two APIs mistakenly allowed access to read-only users. This was
was reported publically in a bug tracker, so I'm sending these patches
without applying any embargo time.

Daniel P. Berrangé (2):
  api: disallow virDomainGetHostname for read-only connections
  remote: enforce ACL write permission for getting guest time & hostname

 src/libvirt-domain.c         | 2 ++
 src/remote/remote_protocol.x | 4 ++--
 2 files changed, 4 insertions(+), 2 deletions(-)

-- 
2.20.1

--
libvir-list mailing list
libvir-list@redhat.com
https://www.redhat.com/mailman/listinfo/libvir-list