commit 186f23998fcead5992ef95e33b01ed40f4ecaa5f
Author: Eric Harney <email address hidden>
Date: Thu Feb 20 11:48:41 2014 -0500
GlusterFS: Set permissions on qcow2 snapshot files
The GlusterFS driver sets specific permissions on the
volume file when volumes are created. Setting them on the
snapshot files at snapshot creation time is also required,
otherwise volume attaches will fail for volumes with snapshots
when using QEMU's libgfapi functionality.
This does not weaken the current security model in any
significant way, as it only lines up the permissions used
for snapshot files with those already used for volume files.
Reviewed: https:/ /review. openstack. org/75110 /git.openstack. org/cgit/ openstack/ cinder/ commit/ ?id=186f23998fc ead5992ef95e33b 01ed40f4ecaa5f
Committed: https:/
Submitter: Jenkins
Branch: master
commit 186f23998fcead5 992ef95e33b01ed 40f4ecaa5f
Author: Eric Harney <email address hidden>
Date: Thu Feb 20 11:48:41 2014 -0500
GlusterFS: Set permissions on qcow2 snapshot files
The GlusterFS driver sets specific permissions on the
volume file when volumes are created. Setting them on the
snapshot files at snapshot creation time is also required,
otherwise volume attaches will fail for volumes with snapshots
when using QEMU's libgfapi functionality.
This does not weaken the current security model in any
significant way, as it only lines up the permissions used
for snapshot files with those already used for volume files.
This will eventually be addressed by functionality in libvirt: /bugzilla. redhat. com/show_ bug.cgi? id=1052014
https:/
Closes-Bug: #1286376
Change-Id: I93944724c557c9 07eb3821a061e74 34f09ff20bc