From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <pve-devel-bounces@lists.proxmox.com> Received: from firstgate.proxmox.com (firstgate.proxmox.com [IPv6:2a01:7e0:0:424::9]) by lore.proxmox.com (Postfix) with ESMTPS id CDA6F1FF16F for <inbox@lore.proxmox.com>; Fri, 15 Nov 2024 10:55:07 +0100 (CET) Received: from firstgate.proxmox.com (localhost [127.0.0.1]) by firstgate.proxmox.com (Proxmox) with ESMTP id E5F95102D8; Fri, 15 Nov 2024 10:55:08 +0100 (CET) Message-ID: <787aaaa9-1f7a-49c8-925e-49308d24df0d@proxmox.com> Date: Fri, 15 Nov 2024 10:55:05 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Beta To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>, Fiona Ebner <f.ebner@proxmox.com>, =?UTF-8?Q?Fabian_Gr=C3=BCnbichler?= <f.gruenbichler@proxmox.com> References: <20241104104221.228730-1-f.gruenbichler@proxmox.com> <20241104104221.228730-4-f.gruenbichler@proxmox.com> <41efc325-3174-4b26-9a23-9dca1df258e4@proxmox.com> <5940b821-b931-4b4a-8262-05c12f7c7cdc@proxmox.com> Content-Language: en-US From: Dominik Csapak <d.csapak@proxmox.com> In-Reply-To: <5940b821-b931-4b4a-8262-05c12f7c7cdc@proxmox.com> X-SPAM-LEVEL: Spam detection results: 0 AWL 0.014 Adjusted score from AWL reputation of From: address BAYES_00 -1.9 Bayes spam probability is 0 to 1% DMARC_MISSING 0.1 Missing DMARC policy KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record SPF_PASS -0.001 SPF: sender matches SPF record URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [qemu.pm] Subject: Re: [pve-devel] [PATCH v2 qemu-server 1/1] disk import: add additional safeguards for imported image files X-BeenThere: pve-devel@lists.proxmox.com X-Mailman-Version: 2.1.29 Precedence: list List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com> List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe> List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/> List-Post: <mailto:pve-devel@lists.proxmox.com> List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help> List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe> Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com> Content-Transfer-Encoding: base64 Content-Type: text/plain; charset="utf-8"; Format="flowed" Errors-To: pve-devel-bounces@lists.proxmox.com Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com> T24gMTEvMTUvMjQgMTA6NDksIEZpb25hIEVibmVyIHdyb3RlOgo+IE9uIDE1LjExLjI0IDEwOjQy IEFNLCBGaW9uYSBFYm5lciB3cm90ZToKPj4gT24gMDQuMTEuMjQgMTE6NDIgQU0sIEZhYmlhbiBH csO8bmJpY2hsZXIgd3JvdGU6Cj4+PiBjcmVhdGluZyBub24tcmF3IGRpc2sgaW1hZ2VzIHdpdGgg YXJiaXRyYXJ5IGNvbnRlbnQgaXMgb25seSBwb3NzaWJsZSB3aXRoIHJhdwo+Pj4gYWNjZXNzIHRv IHRoZSBzdG9yYWdlLCBidXQgY2hlY2tpbmcgZm9yIHJlZmVyZW5jZXMgdG8gZXh0ZXJuYWwgZmls ZXMgZG9lc24ndAo+Pj4gaHVydC4KPj4+Cj4+PiBTaWduZWQtb2ZmLWJ5OiBGYWJpYW4gR3LDvG5i aWNobGVyIDxmLmdydWVuYmljaGxlckBwcm94bW94LmNvbT4KPj4+IC0tLQo+Pj4KPj4+IE5vdGVz Ogo+Pj4gICAgICByZXF1aXJlcyBwdmUtc3RvcmFnZSBjaGFuZ2UgdG8gYWN0dWFsbHkgaGF2ZSBh biBlZmZlY3QKPj4+ICAgICAgCj4+PiAgICAgIHYyOgo+Pj4gICAgICAtIHJlLW9yZGVyIGNvZGUg dG8gaW1wcm92ZSByZWFkYWJpbGl0eQo+Pj4gICAgICAtIGV4dHJhY3QgJHBhdGggaW50byB2YXJp YWJsZSB0byBhdm9pZCBzY2FsYXIgdnMgYXJyYXkgY29udGV4dCBpc3N1ZQo+Pj4KPj4+ICAgUFZF L0FQSTIvUWVtdS5wbSB8IDE4ICsrKysrKysrKysrKysrKy0tLQo+Pj4gICAxIGZpbGUgY2hhbmdl ZCwgMTUgaW5zZXJ0aW9ucygrKSwgMyBkZWxldGlvbnMoLSkKPj4+Cj4+PiBkaWZmIC0tZ2l0IGEv UFZFL0FQSTIvUWVtdS5wbSBiL1BWRS9BUEkyL1FlbXUucG0KPj4+IGluZGV4IDg0ODAwMWI2Li5h ZTBjMzliZiAxMDA2NDQKPj4+IC0tLSBhL1BWRS9BUEkyL1FlbXUucG0KPj4+ICsrKyBiL1BWRS9B UEkyL1FlbXUucG0KPj4+IEBAIC00MTIsMTggKzQxMiwyOSBAQCBteSBzdWIgY3JlYXRlX2Rpc2tz IDogcHJvdG90eXBlKCQkJCQkJCQkJCQpIHsKPj4+ICAgCj4+PiAgIAkJJG5lZWRzX2NyZWF0aW9u ID0gJGxpdmVfaW1wb3J0Owo+Pj4gICAKPj4+IC0JCWlmIChQVkU6OlN0b3JhZ2U6OnBhcnNlX3Zv bHVtZV9pZCgkc291cmNlLCAxKSkgeyAjIFBWRS1tYW5hZ2VkIHZvbHVtZQo+Pj4gKwkJbXkgKCRz b3VyY2Vfc3RvcmFnZSwgJHNvdXJjZV92b2xpZCkgPSBQVkU6OlN0b3JhZ2U6OnBhcnNlX3ZvbHVt ZV9pZCgkc291cmNlLCAxKTsKPj4+ICsKPj4+ICsJCWlmICgkc291cmNlX3N0b3JhZ2UpIHsgIyBQ VkUtbWFuYWdlZCB2b2x1bWUKPj4+ICAgCQkgICAgaWYgKCRsaXZlX2ltcG9ydCAmJiAkZHMgbmUg J2VmaWRpc2swJykgewo+Pj4gICAJCQlteSAkcGF0aCA9IFBWRTo6U3RvcmFnZTo6cGF0aCgkc3Rv cmVjZmcsICRzb3VyY2UpCj4+PiAgIAkJCSAgICBvciBkaWUgImZhaWxlZCB0byBnZXQgYSBwYXRo IGZvciAnJHNvdXJjZSdcbiI7Cj4+PiAgIAkJCSRzb3VyY2UgPSAkcGF0aDsKPj4+IC0JCQkoJHNp emUsIG15ICRzb3VyY2VfZm9ybWF0KSA9IFBWRTo6U3RvcmFnZTo6ZmlsZV9zaXplX2luZm8oJHNv dXJjZSk7Cj4+PiArCQkJIyBjaGVjayBwb3RlbnRpYWxseSB1bnRydXN0ZWQgaW1hZ2UgZmlsZSEK Pj4+ICsJCQkoJHNpemUsIG15ICRzb3VyY2VfZm9ybWF0KSA9IFBWRTo6U3RvcmFnZTo6ZmlsZV9z aXplX2luZm8oJHNvdXJjZSwgdW5kZWYsIDEpOwo+Pj4gKwo+Pj4gICAJCQlkaWUgImNvdWxkIG5v dCBnZXQgZmlsZSBzaXplIG9mICRzb3VyY2VcbiIgaWYgISRzaXplOwo+Pj4gICAJCQkkbGl2ZV9p bXBvcnRfbWFwcGluZy0+eyRkc30gPSB7Cj4+PiAgIAkJCSAgICBwYXRoID0+ICRzb3VyY2UsCj4+ PiAgIAkJCSAgICBmb3JtYXQgPT4gJHNvdXJjZV9mb3JtYXQsCj4+PiAgIAkJCX07Cj4+PiAgIAkJ ICAgIH0gZWxzZSB7Cj4+PiArCQkJIyBjaGVjayBwb3RlbnRpYWxseSB1bnRydXN0ZWQgaW1hZ2Ug ZmlsZSEKPj4+ICsJCQlteSAkc2NmZyA9IFBWRTo6U3RvcmFnZTo6c3RvcmFnZV9jb25maWcoJHN0 b3JlY2ZnLCAkc291cmNlX3N0b3JhZ2UpOwo+Pj4gKwkJCWlmICgkc2NmZy0+e3BhdGh9KSB7Cj4+ Cj4+IElzIHRoZXJlIGEgc3BlY2lhbCByZWFzb24gdGhpcyBpcyBtYWRlIGNvbmRpdGlvbmFsIG9u IHRoZSBwcmVzZW5jZSBvZgo+PiAkc2NmZy0+e3BhdGh9PyBOb3RlIHRoYXQgdGhlIGFib3ZlIGNo ZWNrIGZvciBsaXZlIGltcG9ydCBpc24ndC4KPj4gU2hvdWxkbid0IG1hdHRlciBtdWNoIHJpZ2h0 IG5vdyAoZXhjZXB0IGlmIHRoZXJlIGlzIGEgd2VpcmQgdGhpcmQtcGFydHkKPj4gcGx1Z2luIHRo YXQgaGFzIHFjb3cyIGFuZCBkb2Vzbid0IHVzZSAkc2NmZy0+e3BhdGh9KSwgYnV0IGFzIGxvbmcg YXMgd2UKPj4gZ2V0IGEgcmVzdWx0IGZvciBQVkU6OlN0b3JhZ2U6OnBhdGgoKSwgd2Ugc2hvdWxk IGJlIGFibGUgdG8gY2FsbAo+PiBmaWxlX3NpemVfaW5mbygpIHRvbywgcmlnaHQ/Cj4+Cj4gCj4g T3IgbWF5YmUgbm90LCBidXQgdGhlbiBsaXZlLWltcG9ydCBzaG91bGQndmUgdXNlZCB2b2x1bWVf c2l6ZV9pbmZvKCkgdG9vCj4gSSBndWVzcz8gSSB0aGluayBpdCB3b3VsZCBiZSBnb29kIHRvIGFk ZCBhbiAndW50cnVzdGVkJyBmbGFnIHRvCj4gdm9sdW1lX3NpemVfaW5mbygpIHRvbyBhbmQgaGF2 ZSB0aGUgc3RvcmFnZSBsYXllciBkbyB0aGUgcmlnaHQgdGhpbmcsCj4gcmF0aGVyIHRoYW4gbWFu dWFsbHkgY2hlY2tpbmcgJHNjZmctPntwYXRofSBoZXJlLgo+IAo+IApteSAyIGNlbnRzOgoKdGhl IGNoZWNraW5nIG9mIHVudHJ1c3RlZCBpbWFnZXMgaXMgbWFpbmx5IGhlbHBmdWwgZm9yIGZpbGUg YmFzZWQgdm9sdW1lcwooc3VjaCBhcyBxY293Mi92bWRrL2V0Yy4pIHdoZXJlIHdlIGNhbiBkZXRl Y3QgYmFja2luZyBpbWFnZXMgZXRjLgoKdGhlIGNoZWNrIGZvciAncGF0aCcgaXMgaG93IHdlIHVz dXN1YWxseSBkZXRlcm1pbmUgaWYgYSBzdG9yYWdlIGlzCmZpbGUtYmFzZWQgb3Igbm90ICh3b3Vs ZCBwcm9iYWJseSBiZXR0ZXIgdG8gaGF2ZSB0aGF0IGNoZWNrCmluIHN0b3JhZ2UgYW5kIGl0IHNo b3VsZCBwcm9iYWJseSBjaGVjayBmb3IgcWNvdzIvdm1kay9ldGMuIHN1cHBvcnQpCgpidXQgd2Ug YWxyZWFkeSB1c2UgdGhhdCBjaGVjayBpbiBzb21lIHBsYWNlcwoKCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCnB2ZS1kZXZlbCBtYWlsaW5nIGxpc3QKcHZl LWRldmVsQGxpc3RzLnByb3htb3guY29tCmh0dHBzOi8vbGlzdHMucHJveG1veC5jb20vY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3B2ZS1kZXZlbAo=