question on xenbus priv in dom0

question on xenbus priv in dom0

[NAHieu]

Hi,

In domU, we can't use xenbus to access anything outside of the
domain's home. That means we are being restricted from reading/writing
to other domain's xenstore. That is perfectly fine, and nobody
complains here.

But in dom0, do we have the exception? Since dom0 is trusted, I think
we can be allowed to access to all other domU's xenstore.

Is that possible? If not, any good workaround solution?

Thank you.
Hieu

Re: question on xenbus priv in dom0

[Anthony Liguori]

NAHieu wrote:

>Hi,
>
>In domU, we can't use xenbus to access anything outside of the
>domain's home. That means we are being restricted from reading/writing
>to other domain's xenstore. That is perfectly fine, and nobody
>complains here.
>
>But in dom0, do we have the exception? Since dom0 is trusted, I think
>we can be allowed to access to all other domU's xenstore.
>
>Is that possible? If not, any good workaround solution?
>  
>
It should be possible to read from anywhere in the store.

If you specify a path without a '/' in the beginning, it defaults to 
reading from the domain's home directory.  However, if you use a fully 
qualified path, you should be able to read anywhere.  If this doesn't 
work, it's a bug.

Regards,

Anthony Liguori

>Thank you.
>Hieu
>
>_______________________________________________
>Xen-devel mailing list
>Xen-devel@lists.xensource.com
>http://lists.xensource.com/xen-devel
>
>  
>

Re: question on xenbus priv in dom0

[NAHieu]

On 10/5/05, Anthony Liguori <aliguori@us.ibm.com> wrote:
> NAHieu wrote:
>
> >Hi,
> >
> >In domU, we can't use xenbus to access anything outside of the
> >domain's home. That means we are being restricted from reading/writing
> >to other domain's xenstore. That is perfectly fine, and nobody
> >complains here.
> >
> >But in dom0, do we have the exception? Since dom0 is trusted, I think
> >we can be allowed to access to all other domU's xenstore.
> >
> >Is that possible? If not, any good workaround solution?
> >
> >
> It should be possible to read from anywhere in the store.
>
> If you specify a path without a '/' in the beginning, it defaults to
> reading from the domain's home directory.  However, if you use a fully
> qualified path, you should be able to read anywhere.  If this doesn't
> work, it's a bug.
>

Excellent! Thank you, Anthony.

Hieu