From mboxrd@z Thu Jan  1 00:00:00 1970
From: Pascal Bouchareine <pascal@gandi.net>
Subject: Re: [PATCH] [Xend] Move some backend configuration
Date: Thu, 2 Oct 2008 12:16:17 +0200
Message-ID: <20081002101617.GA81623@bar.gandi.net>
References: <18660.38289.438076.522504@mariner.uk.xensource.com>
	<C50A57BE.27A2C%keir.fraser@eu.citrix.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Return-path: <xen-devel-bounces@lists.xensource.com>
Content-Disposition: inline
In-Reply-To: <C50A57BE.27A2C%keir.fraser@eu.citrix.com>
List-Unsubscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=unsubscribe>
List-Post: <mailto:xen-devel@lists.xensource.com>
List-Help: <mailto:xen-devel-request@lists.xensource.com?subject=help>
List-Subscribe: <http://lists.xensource.com/mailman/listinfo/xen-devel>,
	<mailto:xen-devel-request@lists.xensource.com?subject=subscribe>
Sender: xen-devel-bounces@lists.xensource.com
Errors-To: xen-devel-bounces@lists.xensource.com
To: Keir Fraser <keir.fraser@eu.citrix.com>
Cc: "Daniel P. Berrange" <berrange@redhat.com>, xen-devel@lists.xensource.com, Ian Jackson <Ian.Jackson@eu.citrix.com>, John Levon <levon@movementarian.org>
List-Id: xen-devel@lists.xenproject.org

On Thu, Oct 02, 2008 at 10:49:34AM +0100, Keir Fraser wrote:
> An update on this: I solved this issue by fiddling permissions in xenstore
> after all! /local/domain/<domid> is now read-only to the guest, and specific
> subdirs only are writable (currently device, error and control).

writing into device allows the guest to rewrite it's backend
location, this should be protected too i guess ?

the patch stored backend paths into /vm for this reason

-- 
\o/   Pascal Bouchareine - Gandi 
 g    0170393757           15, place de la Nation - 75011 Paris