Comment 96 for bug 2059809
Revision history for this message
| Sylvain Bauza (sylvain-bauza) wrote Re: Arbitrary file access through QCOW2 external data file | #96 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
I see, we need to make sure that the passed format is right, hence why we should call Glance to get the disk format that was said by the user and compare it to the related format_inspector class.
Fine then if we need another Glance API HTTP call when we fetch some raw disk on a specific compute, I prefer this indeed for a security reason.