[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [PATCH v2 4/4] tools/xenstored: remove permissions related to dead domain


  • To: Juergen Gross <jgross@xxxxxxxx>, <xen-devel@xxxxxxxxxxxxxxxxxxxx>
  • From: Jason Andryuk <jason.andryuk@xxxxxxx>
  • Date: Wed, 29 Apr 2026 12:41:22 -0400
  • Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass (sender ip is 165.204.84.17) smtp.rcpttodomain=suse.com smtp.mailfrom=amd.com; dmarc=pass (p=quarantine sp=quarantine pct=100) action=none header.from=amd.com; dkim=none (message not signed); arc=none (0)
  • Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=PLZdDdf+YT2XXeniydDvja7axsW3ZlGefW/HwhAhIl4=; b=A4apqci0Xfx256SbYNWxidn4KtNRdlGnry8KJOwL/NJVByM79ki60JbohLbnEUVP2HGFtpO52yBkxmJ6aTWbWjYBh1iPjWGCKkyzAfx9paZvMmCMepQUd6DbCiQwfz4rG/j59VWZUgbC08pK1o5//7mLVQCfYU2YqsrTfoWFVUwm0QK+Cpu5rKlJofU7c36M9h6m1JTviN+jCHKBku9hIBvHiSzlLRMNpfOfh5OlGuzxdyEhl1SD5L1troPKcHLP+Rv8NKKNxJh3eKoxai/R4RFITQe6DWqiR+v4/OwZ7w0UW9WJIKpecBv6NhahYGWtWMQjOV9DIojMdgKuVfwkxQ==
  • Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=RTe+C2chu6NGMAZzqH65CgXVjAz/G00mEvCavKkMPbWAVAamxTa59cDWJpzMUEjMhNy5KDhI2SDKSzx8JVJPpxxT3HPm0oy/CgzfemZdAoETPStIX14BFwhr1eMWwwAe1YAATItHkyAJcDJ5YiPkPLBTYdSf96YX9Weax8EAclUBCweyteGT0pXo5+FXFvyTs+7g04vxxoC1E4TxVW8mJBwN3yUbJGb8d6J1M60SXOdGPz9uVXqujWy8xcjnlwMcfgBMAfq3405e9D4eQIatwMu/37FKagp+pAlqmzKotJeD8AHVy07pCzSvCCA6AQjxgKbEs7IwKWkGnsNdkn5ymg==
  • Authentication-results: eu.smtp.expurgate.cloud; dkim=pass header.s=selector1 header.d=amd.com header.i="@amd.com" header.h="From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck"
  • Cc: Julien Grall <julien@xxxxxxx>, Anthony PERARD <anthony.perard@xxxxxxxxxx>
  • Delivery-date: Wed, 29 Apr 2026 16:41:46 +0000
  • List-id: Xen developer discussion <xen-devel.lists.xenproject.org>

On 2026-04-29 08:06, Juergen Gross wrote:
Wit unprivileged domains now capable to use the @releaseDomain watch,

s/Wit/With/ again.

Regards,
Jason

there is no reason not to remove any node permissions which relate to
a domain which has been removed.

This resolves a complex scenario where a new domain could inherit the
permissions of an old one with the same domid.

Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
Reviewed-by: Jason Andryuk <jason.andryuk@xxxxxxx>



 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.