| |
|
 |
|
 |
|
|
|
| |
|
|
xen-devel
Re: [Xen-devel] [PATCH] tools: add XS_RESTRICT operation to C xenstore c
Tim Deegan writes ("[Xen-devel] [PATCH] tools: add XS_RESTRICT operation to C
xenstore client libs."):
> The OCaml xenstored supports the XS_RESTRICT operation, which
> deprivileges a dom0 xenstore connection so it can only affect one
> domain's entries. Add the relevant definitions to the C libraries
> so that callers can use it.
Can you explain what this is for, please ? If it's for security
against a hostile caller, what prevents the caller from simply opening
another xenstore connection ?
Ian.
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
|
|
|
| |
|
Home