From: Daniel P. Berrangé <berrange@redhat.com>
Date: Mon, 29 Mar 2021 10:27:42 +0000 (+0100)
Subject: remote: don't allow dirty rate API with read permission
X-Git-Tag: v7.2.0-rc2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dfbe4f4c9bbfaf01bb865c617674420199b1f1b5;p=thirdparty%2Flibvirt.git

remote: don't allow dirty rate API with read permission

This API interacts with the hypervisor and makes changes to its
behaviour, so must be protected by the write permission.

Reviewed-by: Ján Tomko <jtomko@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
---

diff --git a/src/remote/remote_protocol.x b/src/remote/remote_protocol.x
index 7fdc65f029..743c21b316 100644
--- a/src/remote/remote_protocol.x
+++ b/src/remote/remote_protocol.x
@@ -6743,7 +6743,7 @@ enum remote_procedure {
 
     /**
      * @generate: both
-     * @acl: domain:read
+     * @acl: domain:write
      */
     REMOTE_PROC_DOMAIN_START_DIRTY_RATE_CALC = 427
 };