Qubes/core-admin
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

vm/appvm: forbid changing template if the are children DispVMs

Browse Source 
Changing AppVM's template will not update root volume reference in
DispVMs based on it. For now forbid such change.

Fixes
This commit is contained in:
Marek Marczykowski-Górecki 2018-02-13 04:53:39 +01:00
parent 9b5256f002
commit 717bc4ace3
No known key found for this signature in database
GPG Key ID: 063938BA42CFA724
1 changed files with 12 additions and 0 deletions

12
qubes/vm/appvm.py
View File

@ -97,6 +97,15 @@ class AppVM(qubes.vm.qubesvm.QubesVM):
super(AppVM, self).__init__(app, xml, **kwargs) super(AppVM, self).__init__(app, xml, **kwargs)
@property
def dispvms(self):
''' Returns a generator containing all Disposable VMs based on the
current AppVM.
'''
for vm in self.app.domains:
if hasattr(vm, 'template') and vm.template is self:
yield vm
@qubes.events.handler('domain-load') @qubes.events.handler('domain-load')
def on_domain_loaded(self, event): def on_domain_loaded(self, event):
''' When domain is loaded assert that this vm has a template. ''' When domain is loaded assert that this vm has a template.
@ -117,6 +126,9 @@ class AppVM(qubes.vm.qubesvm.QubesVM):
if not self.is_halted(): if not self.is_halted():
raise qubes.exc.QubesVMNotHaltedError(self, raise qubes.exc.QubesVMNotHaltedError(self,
'Cannot change template while qube is running') 'Cannot change template while qube is running')
if any(self.dispvms):
raise qubes.exc.QubesVMInUseError(self,
'Cannot change template while there are DispVMs based on this qube')
@qubes.events.handler('property-set:template') @qubes.events.handler('property-set:template')
def on_property_set_template(self, event, name, newvalue, oldvalue=None): def on_property_set_template(self, event, name, newvalue, oldvalue=None):