[pve-devel] applied: [PATCH qemu-server] api/resume: make nocheck root-only
Thomas Lamprecht
t.lamprecht at proxmox.com
Wed Apr 29 12:10:40 CEST 2020
On 4/27/20 9:19 AM, Fabian Grünbichler wrote:
> this is only used for migration via 'qm mtunnel', regular users should
> never need to resume a VM that does not logically belong to the node it
> is running on
>
> Signed-off-by: Fabian Grünbichler <f.gruenbichler at proxmox.com>
> ---
> PVE/API2/Qemu.pm | 2 ++
> 1 file changed, 2 insertions(+)
>
> diff --git a/PVE/API2/Qemu.pm b/PVE/API2/Qemu.pm
> index b3683ae..9658a36 100644
> --- a/PVE/API2/Qemu.pm
> +++ b/PVE/API2/Qemu.pm
> @@ -2593,6 +2593,8 @@ __PACKAGE__->register_method({
> if $skiplock && $authuser ne 'root at pam';
>
> my $nocheck = extract_param($param, 'nocheck');
> + raise_param_exc({ nocheck => "Only root may use this option." })
> + if $nocheck && $authuser ne 'root at pam';
>
> my $to_disk_suspended;
> eval {
>
applied, thanks!
More information about the pve-devel
mailing list