Log PermissionDenied and return exc to caller

Author: ben-grande

qubes/api/__init__.py

@@ -403,7 +403,7 @@ async def respond(self, src, meth, dest, arg, *, untrusted_payload):
             if self.transport is None:
                 return
 
-        except (PermissionDenied, ProtocolError) as untrusted_exc:
+        except ProtocolError as untrusted_exc:
             exc_name = untrusted_exc.__class__.__name__
             self.app.log.warning(
                 exc_fmt,
@@ -418,6 +418,20 @@ async def respond(self, src, meth, dest, arg, *, untrusted_payload):
                 self.send_exception(untrusted_exc)
                 self.transport.write_eof()
 
+        except PermissionDenied as exc:
+            self.app.log.warning(
+                exc_fmt,
+                meth,
+                arg,
+                src,
+                dest,
+                len(untrusted_payload),
+                exc_name,
+            )
+            if self.transport is not None:
+                self.send_exception(exc)
+                self.transport.write_eof()
+
         except qubes.exc.QubesException as exc:
             if self.debug:
                 self.app.log.debug(