X-Git-Url: https://git.proxmox.com/?p=pve-access-control.git;a=blobdiff_plain;f=PVE%2FRPCEnvironment.pm;h=52c5f64ce0cf577b1785ba390afef9a97a179e43;hp=ca845f0f8b5efe8aaba3b6471bee860847eca17d;hb=e4f8fc2e7e5f31691629a5361000636f8a2b2398;hpb=854f1dceb6f1bb733518a8a77df670768d9f5392 diff --git a/PVE/RPCEnvironment.pm b/PVE/RPCEnvironment.pm index ca845f0..52c5f64 100644 --- a/PVE/RPCEnvironment.pm +++ b/PVE/RPCEnvironment.pm @@ -14,7 +14,6 @@ use PVE::INotify; use PVE::Cluster; use PVE::ProcFSTools; use PVE::AccessControl; -use Cwd 'abs_path'; # we use this singleton class to pass RPC related environment values @@ -287,7 +286,6 @@ sub check_volume_access { # test if we have read access to volid - my $path; my ($sid, $volname) = PVE::Storage::parse_volume_id($volid, 1); if ($sid) { my ($vtype, undef, $ownervm) = PVE::Storage::parse_volname($storecfg, $volid); @@ -305,13 +303,9 @@ sub check_volume_access { } else { die "Only root can pass arbitrary filesystem paths." if $user ne 'root@pam'; - - $path = abs_path($volid); - if ($path =~ m|^(/.+)$|) { - $path = $1; # untaint any path - } } - return $path; + + return undef; } sub is_group_member {