udev: prevent dom0 processes from accessing templates root image

10 years ago · 9687180a62
parent 7bfa26bd2f
commit 9687180a62
1 changed files with 1 additions and 0 deletions
--- a/system-config/00-qubes-ignore-devices.rules
+++ b/system-config/00-qubes-ignore-devices.rules
@ -3,3 +3,4 @@
 ACTION!="remove", SUBSYSTEM=="block", KERNEL=="loop*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"
 # ENV{DM_NAME} not available yet
 ACTION!="remove", SUBSYSTEM=="block", ATTR{dm/name}=="snapshot-*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"
+ACTION!="remove", SUBSYSTEM=="block", ATTR{dm/name}=="origin-*", ENV{DM_UDEV_DISABLE_DISK_RULES_FLAG}="1"