[pve-devel] applied: [PATCH storage] plugin: volume snapshot info: untaint snapshot filename

Fabian Grünbichler f.gruenbichler at proxmox.com
Mon Jul 28 15:20:18 CEST 2025


On Fri, 25 Jul 2025 17:48:57 +0200, Friedrich Weber wrote:
> Without untainting, offline-deleting a volume-chain snapshot on a
> directory storage via the GUI fails with an "Insecure dependecy in
> exec [...]" error, because volume_snapshot_delete uses the filename
> its qemu-img invocation.
> 
> 

Applied, thanks - this filename here is always absolute, even if we
fix up more of the actual referencing to happen via relative paths.

[1/1] plugin: volume snapshot info: untaint snapshot filename
      commit: 93f0dfbc756e02984d85d5f301314b987d8388f1

Best regards,
-- 
Fabian Grünbichler <f.gruenbichler at proxmox.com>




More information about the pve-devel mailing list