On 15/12/2020 15:04, Juergen Gross wrote: > The different fixed limits for absolute and relative path lengths of > Xenstore nodes make it possible to create per-domain nodes via > absolute paths which are not accessible using relative paths, as the > two limits differ by 1024 characters. > > Instead of this weird limits use only one limit, which applies to the > relative path length of per-domain nodes and to the absolute path > length of all other nodes. This means, the path length check is > applied to the path after removing a possible start of > "/local/domain/<n>/" with <n> being a domain id. > > There has been the request to be able to limit the path lengths even > more, so an additional quota is added which can be applied to path > lengths. It is XENSTORE_REL_PATH_MAX (2048) per default, but can be > set to lower values. This is done via the new "-M" or "--path-max" > option when invoking xenstored. > > Signed-off-by: Juergen Gross <jgr...@suse.com> > Reviewed-by: Paul Durrant <p...@xen.org> > Acked-by: Julien Grall <jgr...@amazon.com>
Reviewed-by: Andrew Cooper <andrew.coop...@citrix.com>
