Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) CVE-2013-4401
authorDaniel P. Berrange <berrange@redhat.com>
Thu, 3 Oct 2013 15:37:57 +0000 (16:37 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Mon, 21 Oct 2013 12:58:40 +0000 (13:58 +0100)
commit57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c
treec774f5f615c363c6b61d314d2009c9d03c9d88cc
parent8d35f9dbad66984564cfd2b84f91568253da6a7a
Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401)

The virConnectDomainXMLToNative API should require 'connect:write'
not 'connect:read', since it will trigger execution of the QEMU
binaries listed in the XML.

Also make virConnectDomainXMLFromNative API require a full
read-write connection and 'connect:write' permission. Although the
current impl doesn't trigger execution of QEMU, we should not
rely on that impl detail from an API permissioning POV.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/libvirt.c
src/remote/remote_protocol.x