]> git.proxmox.com Git - pve-storage.git/commit - PVE/Storage.pm
check_volume_access: tighten checks for iso/tmpl
authorFabian Grünbichler <f.gruenbichler@proxmox.com>
Tue, 5 Feb 2019 15:01:40 +0000 (16:01 +0100)
committerThomas Lamprecht <t.lamprecht@proxmox.com>
Tue, 5 Feb 2019 16:14:50 +0000 (17:14 +0100)
commit061b9ca666f4b5a2d44f3fd38ff3b10b9327f75f
treef1750c509646eca113350e550d3f29e09e586cbd
parent31b63708c2dbea38478ef0b0f56d853bebb8e6d9
check_volume_access: tighten checks for iso/tmpl

(custom) templates might contain sensitive data, so require at least
read access on the underlying storage to access ISO and template files.

the same permissions are already needed for listing them, so this is
unlikely to cause fallout.

Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
PVE/Storage.pm