Re: [PATCH 1/3] xen: xenbus driver must not accept invalid transaction ids

From	Boris Ostrovsky <boris.ostrovsky@oracle.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH 1/3] xen: xenbus driver must not accept invalid transaction ids
Date	2016-12-22 16:40 +0100
Message-ID	<sRdDk-2MH-9@gated-at.bofh.it> (permalink)
References	<sR5Z8-6ip-13@gated-at.bofh.it> <sR5Z8-6ip-25@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 12/22/2016 02:19 AM, Juergen Gross wrote:
> When accessing Xenstore in a transaction the user is specifying a
> transaction id which he normally obtained from Xenstore when starting
> the transaction. Xenstore is validating a transaction id against all
> known transaction ids of the connection the request came in. As all
> requests of a domain not being the one where Xenstore lives share
> one connection, validation of transaction ids of different users of
> Xenstore in that domain should be done by the kernel of that domain
> being the multiplexer between the Xenstore users in that domain and
> Xenstore.
>
> In order to prohibit one Xenstore user to be able to "hijack" a
> transaction from another user the xenbus driver has to verify a
> given transaction id against all known transaction ids of the user
> before forwarding it to Xenstore.
>
> Signed-off-by: Juergen Gross <jgross@suse.com>


Should this go to stable trees as well?


Reviewed-by: Boris Ostrovsky <boris.ostrovsky@oracle.com>

Thread

[PATCH 0/3] xen: fix some minor bugs and cleanup of xenbus Juergen Gross <jgross@suse.com> - 2016-12-22 08:30 +0100
  [PATCH 3/3] xen: remove stale xs_input_avail() from header Juergen Gross <jgross@suse.com> - 2016-12-22 08:30 +0100
    Re: [PATCH 3/3] xen: remove stale xs_input_avail() from header Boris Ostrovsky <boris.ostrovsky@oracle.com> - 2016-12-22 17:00 +0100
  [PATCH 1/3] xen: xenbus driver must not accept invalid transaction ids Juergen Gross <jgross@suse.com> - 2016-12-22 08:30 +0100
    Re: [PATCH 1/3] xen: xenbus driver must not accept invalid  transaction ids Boris Ostrovsky <boris.ostrovsky@oracle.com> - 2016-12-22 16:40 +0100
      Re: [PATCH 1/3] xen: xenbus driver must not accept invalid  transaction ids Juergen Gross <jgross@suse.com> - 2016-12-22 17:00 +0100

csiph-web