Re: [libvirt] [PATCH] virDomainInterfaceAddresses: Allow API on RO connection too

On Mon, Jan 11, 2016 at 12:52:36PM +0100, Michal Privoznik wrote:

This API does not change domain state. It's merely like virDomainGetXMLDesc() - and we don't reject RO connections there. There's no reason to reject them here.

This API can result in talking to the guest agent IIRC, which should be denied for read-only. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|