[libvirt] [PATCH 0/2] Fix permissions checks for virDomainGetTime/Hostname
Daniel P. Berrangé
berrange at redhat.com
Wed Apr 3 14:00:48 UTC 2019
These two APIs mistakenly allowed access to read-only users. This was
was reported publically in a bug tracker, so I'm sending these patches
without applying any embargo time.
Daniel P. Berrangé (2):
api: disallow virDomainGetHostname for read-only connections
remote: enforce ACL write permission for getting guest time & hostname
src/libvirt-domain.c | 2 ++
src/remote/remote_protocol.x | 4 ++--
2 files changed, 4 insertions(+), 2 deletions(-)
--
2.20.1
More information about the libvir-list
mailing list