prevent overwriting ipsets/sec. groups by renaming

[pve-firewall.git] / src / PVE / API2 / Firewall / IPSet.pm

diff --git a/src/PVE/API2/Firewall/IPSet.pm b/src/PVE/API2/Firewall/IPSet.pm
index 1266fd17d4f6b68c05b5c90b476884d8ab1c441f..6129c9d6f79c4fff9284f19240725c35bc643f25 100644 (file)
--- a/src/PVE/API2/Firewall/IPSet.pm
+++ b/src/PVE/API2/Firewall/IPSet.pm
@@ -587,6 +587,11 @@ sub register_create {
                raise_param_exc({ name => "IPSet '$param->{rename}' does not exists" }) 
                    if !$fw_conf->{ipset}->{$param->{rename}};
 
+               # prevent overwriting existing ipset
+               raise_param_exc({ name => "IPSet '$param->{name}' does already exist"})
+                   if $fw_conf->{ipset}->{$param->{name}} &&
+                   $param->{name} ne $param->{rename};
+
                my $data = delete $fw_conf->{ipset}->{$param->{rename}};
                $fw_conf->{ipset}->{$param->{name}} = $data;
                if (my $comment = delete $fw_conf->{ipset_comments}->{$param->{rename}}) {