[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-devel] [PATCH] tools: add XS_RESTRICT operation to C xenstore client libs.



Tim Deegan writes ("[Xen-devel] [PATCH] tools: add XS_RESTRICT operation to C 
xenstore client libs."):
> The OCaml xenstored supports the XS_RESTRICT operation, which
> deprivileges a dom0 xenstore connection so it can only affect one
> domain's entries.   Add the relevant definitions to the C libraries 
> so that callers can use it. 

Can you explain what this is for, please ?  If it's for security
against a hostile caller, what prevents the caller from simply opening
another xenstore connection ?

Ian.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.