]> review.fuel-infra Code Review - openstack-build/cinder-build.git/commit
GlusterFS: Set permissions on qcow2 snapshot files
authorEric Harney <eharney@redhat.com>
Thu, 20 Feb 2014 16:48:41 +0000 (11:48 -0500)
committerEric Harney <eharney@redhat.com>
Fri, 28 Feb 2014 22:35:27 +0000 (17:35 -0500)
commit186f23998fcead5992ef95e33b01ed40f4ecaa5f
tree3d12141054fb21d2acf3846ce7e05e897fa5f7d6
parent97c7c7f2c6270cc65f3f97ac7c9e40fb5c76aa9e
GlusterFS: Set permissions on qcow2 snapshot files

The GlusterFS driver sets specific permissions on the
volume file when volumes are created.  Setting them on the
snapshot files at snapshot creation time is also required,
otherwise volume attaches will fail for volumes with snapshots
when using QEMU's libgfapi functionality.

This does not weaken the current security model in any
significant way, as it only lines up the permissions used
for snapshot files with those already used for volume files.

This will eventually be addressed by functionality in libvirt:
https://bugzilla.redhat.com/show_bug.cgi?id=1052014

Closes-Bug: #1286376

Change-Id: I93944724c557c907eb3821a061e7434f09ff20bc
cinder/volume/drivers/glusterfs.py