A question about vdsm
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some VM config info that I want to prevent from other users. So are there any configurations or ways I can use to disable generation of the file? thank you.
Unfortunately there is no option for that. However you could try to set the directory /var/run/vdsm to chmod 0770 I can’t promise that this works however it might be worth a try
On Apr 28, 2016, at 3:24 AM, zhukaijie <kjzhu14@is.ac.cn> wrote:
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some VM config info that I want to prevent from other users. So are there any configurations or ways I can use to disable generation of the file? thank you. _______________________________________________ Devel mailing list Devel@ovirt.org http://lists.ovirt.org/mailman/listinfo/devel
----- Original Message -----
From: "zhukaijie" <kjzhu14@is.ac.cn> To: devel@ovirt.org Sent: Thursday, April 28, 2016 3:24:20 AM Subject: [ovirt-devel] A question about vdsm
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some VM config info that I want to prevent from other users. So are there any configurations or ways I can use to disable generation of the file? thank you.
Hi, You can't disable the generation of the recovery file, however they should have 0600 permissions: KENji> 15:09:19 root [~]$ ls -lh /var/run/vdsm/ total 16K -rw-------. 1 vdsm kvm 6.3K Apr 28 10:20 127421e2-4e8d-4ddd-8755-d851035c08fa.recovery -rw-------. 1 vdsm kvm 6.3K Apr 28 10:20 b29c12fe-d0ce-4bed-b2f5-184488854d37.recovery Is this protection good enough? Bests, -- Francesco Romani RedHat Engineering Virtualization R & D Phone: 8261328 IRC: fromani
participants (3)
-
Francesco Romani -
Vinzenz Feenstra -
zhukaijie