Additionally, use a whitelist model to decide whether authentication
is needed or not.

Signed-off-by: Marc Hartmayer <[email protected]>
Reviewed-by: Boris Fiuczynski <[email protected]>
Reviewed-by: Bjoern Walk <[email protected]>
Reviewed-by: Stefan Zimmermann <[email protected]>
---
 src/rpc/virnetserverclient.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/rpc/virnetserverclient.c b/src/rpc/virnetserverclient.c
index b454a3ff6992..0ee299e2d6ec 100644
--- a/src/rpc/virnetserverclient.c
+++ b/src/rpc/virnetserverclient.c
@@ -1512,10 +1512,10 @@ int virNetServerClientSendMessage(virNetServerClientPtr 
client,
 
 bool virNetServerClientNeedAuth(virNetServerClientPtr client)
 {
-    bool need = false;
+    bool need = true;
     virObjectLock(client);
-    if (client->auth)
-        need = true;
+    if (client->auth == VIR_NET_SERVER_SERVICE_AUTH_NONE)
+        need = false;
     virObjectUnlock(client);
     return need;
 }
-- 
2.13.4

--
libvir-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/libvir-list

Reply via email to