]> git.ipfire.org Git - thirdparty/libvirt.git/commit
qemu: snapshot: Do ACL check prior to checkpoint interlocking
authorPeter Krempa <pkrempa@redhat.com>
Mon, 23 Sep 2019 13:48:06 +0000 (15:48 +0200)
committerPeter Krempa <pkrempa@redhat.com>
Mon, 23 Sep 2019 14:42:54 +0000 (16:42 +0200)
commit15340ff5839dfdbaa143b5ddbddcc2f3bf072220
treed872a1f8f3e806f403d924088db73aa2dc5cac29
parent8e02fa2e257b84d7e546d0b30a86373f27703289
qemu: snapshot: Do ACL check prior to checkpoint interlocking

Commit 7efe930ec3c introduced interlock of snapshots and checkpoints,
but the check is executed prior to the snapshot API ACL check. This
means that an unauthorized user can see whether a VM exists if it has a
checkpoint.

Move the checks to proper places.

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Eric Blake <eblake@redhat.com>
src/qemu/qemu_driver.c