Allow virDomain(SG)etGuestVcpus on read-write connection only

Guest agent interaction is considered privileged.

Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=1349272

diff --git a/src/libvirt-domain.c b/src/libvirt-domain.c
index 508520efd6c55a562c0a4dd9b4032e28e72f6174..2ca054a328b098632088a370a6bf2663a662f8cc 100644 (file)
--- a/src/libvirt-domain.c
+++ b/src/libvirt-domain.c
@@ -11873,6 +11873,8 @@ virDomainGetGuestVcpus(virDomainPtr domain,
     virResetLastError();
 
     virCheckDomainReturn(domain, -1);
+    virCheckReadOnlyGoto(domain->conn->flags, error);
+
     virCheckNonNullArgGoto(params, error);
     virCheckNonNullArgGoto(nparams, error);
 
@@ -11929,6 +11931,8 @@ virDomainSetGuestVcpus(virDomainPtr domain,
     virResetLastError();
 
     virCheckDomainReturn(domain, -1);
+    virCheckReadOnlyGoto(domain->conn->flags, error);
+
     virCheckNonNullArgGoto(cpumap, error);
 
     if (domain->conn->driver->domainSetGuestVcpus) {