Re: [Xen-devel] [PATCH] [Xend] Move some backend configuration

[Keir Fraser <keir.fraser@xxxxxxxxxxxxx>]

On 2/10/08 11:16, "Pascal Bouchareine" <pascal@xxxxxxxxx> wrote:

> On Thu, Oct 02, 2008 at 10:49:34AM +0100, Keir Fraser wrote:
>> An update on this: I solved this issue by fiddling permissions in xenstore
>> after all! /local/domain/<domid> is now read-only to the guest, and specific
>> subdirs only are writable (currently device, error and control).
> 
> writing into device allows the guest to rewrite it's backend
> location, this should be protected too i guess ?
> 
> the patch stored backend paths into /vm for this reason

I kept that part of your patch as indeed the guest can still modify its
backend reference.

 -- Keir



_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel