Re: [Xen-devel] problem of the permissions system in xenstore

[Keir Fraser <Keir.Fraser@xxxxxxxxxxxx>]

On 1/11/06 10:32, "Max Zhen" <Max.Zhen@xxxxxxx> wrote:

> Is it a bug that a domU has no read permission to a path while has read
> permission to a path under it?

No that is valid, but the xenstored code is also quite anal about letting
untrusted clients know about presence/absence of nodes in subtrees for which
it has no access permissions. This case is obviously a bug -- a watch should
fire when a watched node disappears, even if the watcher cannot tell the
difference between that and the node being inaccessible.

I presume you have already tracked this down in xenstored. Can you make a
patch?

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel