From 3606fe64a48e5dd99c92bab831f7223341065a3f Mon Sep 17 00:00:00 2001
From: Rusty Bird <rustybird@openmailbox.org>
Date: Thu, 18 Aug 2016 12:54:26 +0000
Subject: [PATCH] qubesutils.py: pass readonly mode to libvirt

Fixes QubesOS/qubes-issues#2255
---
 core/qubesutils.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/core/qubesutils.py b/core/qubesutils.py
index 85dad0f1..ce15dc10 100644
--- a/core/qubesutils.py
+++ b/core/qubesutils.py
@@ -424,6 +424,8 @@ def block_attach(qvmc, vm, device, frontend=None, mode="w", auto_detach=False, w
     SubElement(disk, 'target').set('dev', frontend)
     if backend_vm.qid != 0:
         SubElement(disk, 'backenddomain').set('name', device['vm'])
+    if mode == "r":
+        SubElement(disk, 'readonly')
     vm.libvirt_domain.attachDevice(etree.tostring(disk,  encoding='utf-8'))
     try:
         # trigger watches to update device status