2 Commits

Author	SHA1	Message	Date
Daniel P. Berrange	57f2e3274d	Extend the ACL test case to validate filter rule checks ... The 'check-aclrules' test case validates that there are ACL checks in each method. This extends it so that it can also validate that methods which return info about lists of objects, will filter their returned info throw an ACL check. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>	2013-07-03 15:54:54 +01:00
Daniel P. Berrange	684ce8300e	Add validation that all APIs contain ACL checks ... Add a script which parses the driver API code and validates that every API registered in a virNNNDriverPtr table contains an ACL check matching the API name. NB this currently whitelists a few xen driver functions which are temporarily lacking in access control checks. The xen driver is considered insecure until these are fixed. Signed-off-by: Daniel P. Berrange <berrange@redhat.com>	2013-06-24 15:47:31 +01:00