8:24 p.m.
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some VM config
info that I want to prevent from other users. So are there any configurations or ways I
can use to disable generation of the file? thank you.
2:07 a.m.
Unfortunately there is no option for that.
However you could try to set the directory /var/run/vdsm to chmod 0770
I can’t promise that this works however it might be worth a try
On Apr 28, 2016, at 3:24 AM, zhukaijie <kjzhu14(a)is.ac.cn>
wrote:
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some VM config
info that I want to prevent from other users. So are there any configurations or ways I
can use to disable generation of the file? thank you.
_______________________________________________
Devel mailing list
Devel(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/devel
8:11 a.m.
----- Original Message -----
From: "zhukaijie" <kjzhu14(a)is.ac.cn>
To: devel(a)ovirt.org
Sent: Thursday, April 28, 2016 3:24:20 AM
Subject: [ovirt-devel] A question about vdsm
[vm_id].recovery file is generated which /var/run/vdsm/, which contains some
VM config info that I want to prevent from other users. So are there any
configurations or ways I can use to disable generation of the file? thank
you.
Hi,
You can't disable the generation of the recovery file, however they should
have 0600 permissions:
KENji> 15:09:19 root [~]$ ls -lh /var/run/vdsm/
total 16K
-rw-------. 1 vdsm kvm 6.3K Apr 28 10:20 127421e2-4e8d-4ddd-8755-d851035c08fa.recovery
-rw-------. 1 vdsm kvm 6.3K Apr 28 10:20 b29c12fe-d0ce-4bed-b2f5-184488854d37.recovery
Is this protection good enough?
Bests,
--
Francesco Romani
RedHat Engineering Virtualization R & D
Phone: 8261328
IRC: fromani
2914
days inactive
2914
days old
2 comments
3 participants
participants (3)
-
Francesco Romani -
Vinzenz Feenstra -
zhukaijie