From: Peter Krempa <pkrempa@redhat.com>
Date: Thu, 23 Jun 2016 07:02:29 +0000 (+0200)
Subject: Allow virDomain(SG)etGuestVcpus on read-write connection only
X-Git-Tag: v2.0.0-rc1~90
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dfeb19ff60cb92a9088cfa2e827cf5cb4720dd19;p=thirdparty%2Flibvirt.git

Allow virDomain(SG)etGuestVcpus on read-write connection only

Guest agent interaction is considered privileged.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1349272
---

diff --git a/src/libvirt-domain.c b/src/libvirt-domain.c
index 508520efd6..2ca054a328 100644
--- a/src/libvirt-domain.c
+++ b/src/libvirt-domain.c
@@ -11873,6 +11873,8 @@ virDomainGetGuestVcpus(virDomainPtr domain,
     virResetLastError();
 
     virCheckDomainReturn(domain, -1);
+    virCheckReadOnlyGoto(domain->conn->flags, error);
+
     virCheckNonNullArgGoto(params, error);
     virCheckNonNullArgGoto(nparams, error);
 
@@ -11929,6 +11931,8 @@ virDomainSetGuestVcpus(virDomainPtr domain,
     virResetLastError();
 
     virCheckDomainReturn(domain, -1);
+    virCheckReadOnlyGoto(domain->conn->flags, error);
+
     virCheckNonNullArgGoto(cpumap, error);
 
     if (domain->conn->driver->domainSetGuestVcpus) {