vm/qubesvm: forbid '/' in kernel property

It would give VM access to some files outside of
/var/lib/qubes/vm-kernels.
这个提交包含在:
Marek Marczykowski-Górecki 2017-03-11 19:21:59 +01:00
父节点 a036e2a8a0
当前提交 123feced36
找不到此签名对应的密钥
GPG 密钥 ID: 063938BA42CFA724

查看文件

@ -128,6 +128,9 @@ def _setter_kernel(self, prop, value):
if value is None:
return value
value = str(value)
if '/' in value:
raise qubes.exc.QubesPropertyValueError(self, prop, value,
'Kernel name cannot contain \'/\'')
dirname = os.path.join(
qubes.config.system_path['qubes_base_dir'],
qubes.config.system_path['qubes_kernels_base_dir'],