[Xen-changelog] [xen master] tools/xenstore: don't apply write limiting for privileged domain

[patchbot@xxxxxxx]

commit 957bd8e7e302f1a0d31c95fc9910429f10a04d54
Author:     Juergen Gross <jgross@xxxxxxxx>
AuthorDate: Fri Jan 31 15:25:57 2020 +0100
Commit:     Wei Liu <wl@xxxxxxx>
CommitDate: Fri Jan 31 16:13:49 2020 +0000

    tools/xenstore: don't apply write limiting for privileged domain
    
    Xenstore write limiting should not be applied to dom0. Unfortunately
    write limiting is disabled only for connections via sockets. When
    running in a stubdom Xenstore will apply write limiting to dom0, too.
    Change that by testing for the domain to be privileged as well.
    
    Signed-off-by: Juergen Gross <jgross@xxxxxxxx>
    Acked-by: Wei Liu <wl@xxxxxxx>
---
 tools/xenstore/xenstored_domain.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tools/xenstore/xenstored_domain.c 
b/tools/xenstore/xenstored_domain.c
index 1a83097952..baddaba5df 100644
--- a/tools/xenstore/xenstored_domain.c
+++ b/tools/xenstore/xenstored_domain.c
@@ -918,8 +918,8 @@ void wrl_apply_debit_actual(struct domain *domain)
 {
        struct wrl_timestampt now;
 
-       if (!domain)
-               /* sockets escape the write rate limit */
+       if (!domain || !domid_is_unprivileged(domain->domid))
+               /* sockets and privileged domain escape the write rate limit */
                return;
 
        wrl_gettime_now(&now);
--
generated by git-patchbot for /home/xen/git/xen.git#master

_______________________________________________
Xen-changelog mailing list
Xen-changelog@xxxxxxxxxxxxxxxxxxxx
https://lists.xenproject.org/xen-changelog