CVE-2015-0236: qemu: Check ACLs when dumping security info from save image
authorPeter Krempa <pkrempa@redhat.com>
Tue, 20 Jan 2015 16:01:01 +0000 (17:01 +0100)
committerEric Blake <eblake@redhat.com>
Thu, 22 Jan 2015 18:13:05 +0000 (11:13 -0700)
commit9475a25c86f3748e2069af67db69d79864b707b9
treec42501c1bd5be1039d2f66198b9ac8ff9f0b8bc0
parent0d365c6f707f55e77ff14d6a52a59b7d1c43f8a4
CVE-2015-0236: qemu: Check ACLs when dumping security info from save image

The ACL check didn't check the VIR_DOMAIN_XML_SECURE flag and the
appropriate permission for it.

(cherry picked from commit 03c3c0c874c84dfa51ef17556062b095c6e1c0a3)
src/qemu/qemu_driver.c
src/remote/remote_protocol.x