On Thu, 31 Jul 2025 09:13:02 +0200, Friedrich Weber wrote:
> Without untainting, offline-deleting a volume-chain snapshot on an LVM
> storage via the GUI can fail with an "Insecure dependecy in exec
> [...]" error, because volume_snapshot_delete uses the filename its
> qemu-img invocation.
>
> Commit 93f0dfb ("plugin: volume snapshot info: untaint snapshot
> filename") fixed this already for the volume_snapshot_info
> implementation of the Plugin base class, but missed that the LVM
> plugin overrides the method and was still missing the untaint.
>
> [...]
Applied, thanks!
[1/1] plugin: lvm: volume snapshot info: untaint snapshot filename
commit: 92efe5c6cb9904ebf7bbb7f8d690ac80e7c91e23
_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
