Comment 26 for bug 1524274

Revision history for this message
Matthew Booth (mbooth-9) wrote : Re: Unprivileged api user can access host data using instance snapshot

I've uploaded 3 patches to address the 3 issues discussed in this bug, including the live-snapshot issue mentioned by nikola which we aren't 100% sure is usefully exploitable. They all now have proper commit messages. I have tested them against filesystem/raw and rbd locally, but I would be very grateful for review.