From 5a98ea63a3c3370b345527bcc40f0264a9fc67e4 Mon Sep 17 00:00:00 2001 From: AppaRao Puli Date: Sun, 10 Nov 2019 21:15:02 +0530 Subject: Updated privileges for IPMI commands Updated privilege restrictions for below IPMI commands as per IPMI spec. - Get Session Info: User - Get ACPI Power State: User - Get Watchdog Timer: User Tested: Tested above commands with different privileged users and validated. Change-Id: If98d3125eee2192ac3b0f9195d1a46d57310abbf Signed-off-by: AppaRao Puli --- apphandler.cpp | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/apphandler.cpp b/apphandler.cpp index ba1c439..8f11a8c 100644 --- a/apphandler.cpp +++ b/apphandler.cpp @@ -1638,8 +1638,8 @@ void register_netfn_app_functions() ipmi::Privilege::Operator, ipmiAppResetWatchdogTimer); ipmi::registerHandler(ipmi::prioOpenBmcBase, ipmi::netFnApp, - ipmi::app::cmdGetSessionInfo, - ipmi::Privilege::Callback, ipmiAppGetSessionInfo); + ipmi::app::cmdGetSessionInfo, ipmi::Privilege::User, + ipmiAppGetSessionInfo); // ipmi::registerHandler(ipmi::prioOpenBmcBase, ipmi::netFnApp, @@ -1652,8 +1652,8 @@ void register_netfn_app_functions() // ipmi::registerHandler(ipmi::prioOpenBmcBase, ipmi::netFnApp, - ipmi::app::cmdGetWatchdogTimer, - ipmi::Privilege::Operator, ipmiGetWatchdogTimer); + ipmi::app::cmdGetWatchdogTimer, ipmi::Privilege::User, + ipmiGetWatchdogTimer); // ipmi::registerHandler(ipmi::prioOpenBmcBase, ipmi::netFnApp, @@ -1672,7 +1672,7 @@ void register_netfn_app_functions() // ipmi::registerHandler(ipmi::prioOpenBmcBase, ipmi::netFnApp, ipmi::app::cmdGetAcpiPowerState, - ipmi::Privilege::Admin, ipmiGetAcpiPowerState); + ipmi::Privilege::User, ipmiGetAcpiPowerState); // Note: For security reason, this command will be registered only when // there are proper I2C Master write read whitelist -- cgit v1.2.1