]> git.ipfire.org Git - thirdparty/libvirt.git/commit
Add validation that all APIs contain ACL checks
authorDaniel P. Berrange <berrange@redhat.com>
Mon, 29 Apr 2013 15:37:07 +0000 (16:37 +0100)
committerDaniel P. Berrange <berrange@redhat.com>
Mon, 24 Jun 2013 14:47:31 +0000 (15:47 +0100)
commit684ce8300ebc35c645aed3f6e1fdd8dd679dffdf
tree67033801d055f28ab021a401ed501c17526c37d6
parent5de708c1b9f100d820624d462eb8e7e9108529b8
Add validation that all APIs contain ACL checks

Add a script which parses the driver API code and validates
that every API registered in a virNNNDriverPtr table contains
an ACL check matching the API name.

NB this currently whitelists a few xen driver functions
which are temporarily lacking in access control checks.
The xen driver is considered insecure until these are
fixed.

Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
src/Makefile.am
src/check-aclrules.pl [new file with mode: 0644]