qvm-block: fix checking attached status of disk image files

Libvirt do not show actual block device (loop*) choosen for the device -
only original (file) path. But file path is available in device
description. Please note that VM can provide any description (withing
allowed limits), effectively breaking this check again (hidding the
attachment status). But even without this bug it could do that - by
hidding the whole device from QubesDB.

Fixes QubesOS/qubes-issues#2453
This commit is contained in:
Marek Marczykowski-Górecki 2016-11-23 03:25:03 +01:00
rodzic 68a116e8a3
commit ba4dec5383
Nie znaleziono w bazie danych klucza dla tego podpisu
ID klucza GPG: 063938BA42CFA724
2 zmienionych plików z 4 dodań i 1 usunięć

Wyświetl plik

@ -372,7 +372,9 @@ def block_check_attached(qvmc, device):
"VM '%s'" % (source.get('type'),
vm.name)
continue
if backend_name == device['vm'] and path == device['device']:
if backend_name == device['vm'] and (path == device['device']
or not path.startswith('/dev/') and path == device[
'desc']):
return {
"frontend": disk.find('target').get('dev'),
"vm": vm}

Wyświetl plik

@ -87,6 +87,7 @@ def main():
if options.do_file_attach:
dev = {}
(dev['vm'], dev['device']) = args[1].split(":")
dev['desc'] = dev['device']
dev['mode'] = 'w'
else:
dev_list = block_list(qvm_collection)