1 files changed, 17 insertions, 0 deletions

diff --git a/gitlab/issues/target_missing/host_missing/accel_missing/2747.toml b/gitlab/issues/target_missing/host_missing/accel_missing/2747.toml
new file mode 100644
index 000000000..5384d64d5
--- /dev/null
+++ b/gitlab/issues/target_missing/host_missing/accel_missing/2747.toml
@@ -0,0 +1,17 @@
+id = 2747
+title = "External snapshots are created world-readable when connecting via qemu+ssh://root"
+state = "opened"
+created_at = "2024-12-24T14:52:29.430Z"
+closed_at = "n/a"
+labels = ["Security", "Storage"]
+url = "https://gitlab.com/qemu-project/qemu/-/issues/2747"
+host-os = "openSUSE Tumbleweed 20241222"
+host-arch = "x86_64"
+qemu-version = "9.2.0"
+guest-os = "n/a"
+guest-arch = "n/a"
+description = """External snapshots are created with world-readable permissions when connecting via `qemu+ssh://root`."""
+reproduce = """1. Create a VM over `qemu+ssh://root@$SERVER/system`
+2. Create an external snapshot via virt-manager or with `virsh snapshot-create-as  --domain testvm --name test --disk-only --diskspec vda,file=/var/lib/libvirt/images/test.qcow2  --atomic`
+3. `ls -l /var/lib/libvirt/images/test.qcow2`"""
+additional = """Issue doesn't seem to go away by adding `umask 077` in `$HOME/.profile`"""