Commit d8d04b30 authored by Yathindra Naik's avatar Yathindra Naik

- Construct_node now creates capabilities on all nodes.

- Construct_node also grants capabilities to other domains that create nodes.
- Hacked get_perms API in xenstore. Now I can see the capabilities set on different nodes via "xenstore-ls -p".
- caps_for_conn returns error by default. This implies that when a new domain/driver reads a node and if it does not have the necessary capabilities then it'll get an error. Note that in ACL xenstore, they have a default permission.
- caps_for_conn also checks caps for priviliged domains which is simply granted access in ACL xenstored. This change is for us to see if the priviliged domains are getting the right capabilities and not more.
- I still need to see if we need a default capability concept at all.
parent 2d521e97
This diff is collapsed.
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment