vm/qubesvm: forbid '/' in kernel property
It would give VM access to some files outside of /var/lib/qubes/vm-kernels.
这个提交包含在:
父节点
a036e2a8a0
当前提交
123feced36
@ -128,6 +128,9 @@ def _setter_kernel(self, prop, value):
|
||||
if value is None:
|
||||
return value
|
||||
value = str(value)
|
||||
if '/' in value:
|
||||
raise qubes.exc.QubesPropertyValueError(self, prop, value,
|
||||
'Kernel name cannot contain \'/\'')
|
||||
dirname = os.path.join(
|
||||
qubes.config.system_path['qubes_base_dir'],
|
||||
qubes.config.system_path['qubes_kernels_base_dir'],
|
||||
|
||||
正在加载...
在新工单中引用
屏蔽一个用户