Changeset 105087 in vbox for trunk/src/VBox/Main/idl

Timestamp:

Jul 1, 2024 11:27:59 PM (5 months ago)

Author:

vboxsync

Message:

doc/manual,include/VBox,Frontends/VBoxManage,HostServices/SharedFolders,
Main/{include,SharedFolder,Console,Machine,VirtualBox.xidl}: Add a
new attribute to ISharedFolder for specifying a symbolic link creation
policy to restrict the source pathname when creating symbolic links
within a guest. The symbolic link policies are represented by a new
enumeration of type SymlinkPolicy_T which includes values for no
restrictions ('any'), symlink sources only within the subtree of the
share ('subtree'), symlink sources as any relative path ('relative'),
and no symlinks allowed ('forbidden'). The symlink policy can only be
applied to permanent shared folders at this stage. bugref:10619

File:

• trunk/src/VBox/Main/idl/VirtualBox.xidl (modified) (4 diffs)

trunk/src/VBox/Main/idl/VirtualBox.xidl

@@ -657 +657 @@
       <desc>Settings version "1.20", written by VirtualBox 7.1.x.</desc>
       <!--
-          Adds VM platform support: Non-platform-specific
-          settings were moved to the new Platform element, which now contains
-          the platform architecture for this VM. x86-specific
-          settings were moved from Machine to a new, dedicated Platform/x86 element.
-          BIOSSettings were renamed to FirmwareSettings. ARM-specific settings
-          were added to a new, dedicated Platform/ARM element. This settings
-          version only will be written if the ARM platform architecture is being
-          selected. Only affects the machine settings (not main configuration
-          settings).
+        - Machine changes:
+          + Adds VM platform support: Non-platform-specific
+            settings were moved to the new Platform element, which now contains
+            the platform architecture for this VM. x86-specific
+            settings were moved from Machine to a new, dedicated Platform/x86 element.
+            BIOSSettings were renamed to FirmwareSettings. ARM-specific settings
+            were added to a new, dedicated Platform/ARM element. This settings
+            version only will be written if the ARM platform architecture is being
+            selected. Only affects the machine settings (not main configuration
+            settings).
+          + Adds support for Shared Folder symbolic link configuration. (Machine
+            settings only).
       -->
     </const>
@@ -24429 +24432 @@
   <interface
     name="ISharedFolder" extends="$unknown"
-    uuid="9622225a-5409-414b-bd16-77df7ba3451e"
+    uuid="0b108b8c-62e0-4e06-9dfa-2f1a2ad70774"
     wsmap="managed"
     rest="managed"
@@ -24540 +24543 @@
         failure and should normally describe a reason of the failure (for
         example, a file read error).
+      </desc>
+    </attribute>
+
+    <attribute name="symlinkPolicy" type="SymlinkPolicy">
+      <desc>
+        The security policy for allowing guest VMs to create symbolic links
+        within a Shared Folder.
       </desc>
     </attribute>
@@ -30205 +30215 @@
 </enum>
 
+  <enum
+    name="SymlinkPolicy"
+    uuid="a818472e-215d-4279-8af8-eac4c0517bcc"
+    >
+    <desc>Shared Folder Symbolic Link Security Policies</desc>
+    <const name="None"                       value="0">
+      <desc>No symlink policy set (never used by the API).</desc>
+    </const>
+    <const name="Forbidden"                  value="1">
+      <desc>Users in the guest VM are not able to create symbolic links inside the Shared Folder.</desc>
+    </const>
+    <const name="AllowedInShareSubtree"      value="2">
+      <desc>Users in the guest VM are allowed to create symbolic links within the Shared Folder so long
+          as the target remains in the Shared Folder or within the subtree of the Shared Folder.
+      </desc>
+    </const>
+    <const name="AllowedToRelativeTargets"   value="3">
+      <desc>Users in the guest VM are allowed to create symbolic links within the Shared Folder to
+          targets within the Shared Folder and its subtree as well as to relative targets (../) outside of
+          the Shared Folder.
+      </desc>
+    </const>
+    <const name="AllowedToAnyTarget"         value="4">
+      <desc>Users in the guest VM are allowed to create symbolic links within the Shared Folder and
+          its subtree as well as to other targets via either relative pathnames or absolute pathnames.
+      </desc>
+    </const>
+</enum>
 
   <interface name="ICloudNetworkGatewayInfo" extends="$unknown"