On Mon, Jan 11, 2016 at 12:52:36PM +0100, Michal Privoznik wrote: > This API does not change domain state. It's merely like > virDomainGetXMLDesc() - and we don't reject RO connections there. > There's no reason to reject them here. This API can result in talking to the guest agent IIRC, which should be denied for read-only. Regards, Daniel -- |: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :| |: http://libvirt.org -o- http://virt-manager.org :| |: http://autobuild.org -o- http://search.cpan.org/~danberr/ :| |: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :| -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list