id = 2747
title = "External snapshots are created world-readable when connecting via qemu+ssh://root"
state = "opened"
created_at = "2024-12-24T14:52:29.430Z"
closed_at = "n/a"
labels = ["Security", "Storage"]
url = "https://gitlab.com/qemu-project/qemu/-/issues/2747"
host-os = "openSUSE Tumbleweed 20241222"
host-arch = "x86_64"
qemu-version = "9.2.0"
guest-os = "n/a"
guest-arch = "n/a"
description = """External snapshots are created with world-readable permissions when connecting via `qemu+ssh://root`."""
reproduce = """1. Create a VM over `qemu+ssh://root@$SERVER/system`
2. Create an external snapshot via virt-manager or with `virsh snapshot-create-as  --domain testvm --name test --disk-only --diskspec vda,file=/var/lib/libvirt/images/test.qcow2  --atomic`
3. `ls -l /var/lib/libvirt/images/test.qcow2`"""
additional = """Issue doesn't seem to go away by adding `umask 077` in `$HOME/.profile`"""