On Mon, Mar 22, 2021 at 01:59:17PM +0000, Stuart Henderson wrote:
> > > I'm more familiar with the vmd(8) codebase than any ffs stuff, but I
> > > don't think the issue is the base image being r/w.
> >
> > AFAIKS, the issue is that if you start a vm modifying the base because it
> > uses it as a regular image, that r/o open for the other vms does not
> > matter a lot,
>
> vmd could possibly refuse to use an image as a base for a derived image
> if it already has the base open (or vice-versa), but then some other
> software (e.g. qemu, qemu-img) could modify the base image too, there
> are always ways to break things not matter what the safeguards.
>
Hence my safeguard at the OS level: chmod it...
-Otto
