Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401)
authorDaniel P. Berrange <berrange@redhat.com>
Thu, 3 Oct 2013 15:37:57 +0000 (16:37 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Mon, 21 Oct 2013 13:20:22 +0000 (14:20 +0100)
commit90171893ce0d78dd5b93137c6a395b06756f9a08
tree8ea457bed037c36cac8e90e8ca6011ac44274272
parent0eb43777dbd4c310fbaf40e75fafa3b1e7499c19
Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401)

The virConnectDomainXMLToNative API should require 'connect:write'
not 'connect:read', since it will trigger execution of the QEMU
binaries listed in the XML.

Also make virConnectDomainXMLFromNative API require a full
read-write connection and 'connect:write' permission. Although the
current impl doesn't trigger execution of QEMU, we should not
rely on that impl detail from an API permissioning POV.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
(cherry picked from commit 57687fd6bf7f6e1b3662c52f3f26c06ab19dc96c)
src/libvirt.c
src/remote/remote_protocol.x