[ovirt-devel] A question about vdsm

[Francesco Romani]

----- Original Message -----
> From: "zhukaijie" <kjzhu14 at is.ac.cn>
> To: devel at ovirt.org
> Sent: Thursday, April 28, 2016 3:24:20 AM
> Subject: [ovirt-devel] A question about vdsm
> 
> [vm_id].recovery file is generated which /var/run/vdsm/, which contains some
> VM config info that I want to prevent from other users. So are there any
> configurations or ways  I can use to disable generation of the file? thank
> you.

Hi,

You can't disable the generation of the recovery file, however they should
have 0600 permissions:

KENji> 15:09:19 root [~]$ ls -lh /var/run/vdsm/
total 16K
-rw-------. 1 vdsm kvm  6.3K Apr 28 10:20 127421e2-4e8d-4ddd-8755-d851035c08fa.recovery
-rw-------. 1 vdsm kvm  6.3K Apr 28 10:20 b29c12fe-d0ce-4bed-b2f5-184488854d37.recovery

Is this protection good enough?

Bests,

-- 
Francesco Romani
RedHat Engineering Virtualization R & D
Phone: 8261328
IRC: fromani