]> xenbits.xensource.com Git - libvirt.git/commit
remote: pass identity across to newly opened daemons
authorDaniel P. Berrangé <berrange@redhat.com>
Fri, 26 Jul 2019 15:34:15 +0000 (16:34 +0100)
committerDaniel P. Berrangé <berrange@redhat.com>
Mon, 16 Sep 2019 10:25:53 +0000 (11:25 +0100)
commit7d84ce059e2c1b93948211c35ad7ae76a0f0d67a
tree042f64c2ac7a35208124f7e1c238496cb4e5b23f
parent4471003836527c7997c00a9e3f7f09cf9e15692d
remote: pass identity across to newly opened daemons

When opening a connection to a second driver inside the daemon, we must
ensure the identity of the current user is passed across. This allows
the second daemon to perform access control checks against the real end
users, instead of against the libvirt daemon that's proxying across the
API calls.

Reviewed-by: Michal Privoznik <mprivozn@redhat.com>
Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
src/libvirt_remote.syms
src/remote/remote_daemon_dispatch.c
src/remote/remote_driver.c
src/remote/remote_protocol.x
src/remote_protocol-structs
src/rpc/virnetserverclient.c
src/rpc/virnetserverclient.h