Hi, Thanks for the suggestion. I've committed a change to CVS to do what you want, and added support for a '--force' flag to override the new behaviour.
To be honest I'm not sure how useful this will be since there are still several places where semi-arbitary files can be deleted/changed (such as 'xen-delete-image --hostname=../../../../...'). There is minimal checking in place to deal with the ".img" suffix, but I think when you assume that root is running the script you have to trust them a little. Anyway the change will be uploaded once the package migrates into testing, if you wish to test it you can find the diff here: http://www.cvsrepository.org/cgi-bin/trac/xen-tools/chngview?cn=299 (Annoyingly there appear to be a lot of whitespace changes too. My bad.) Steve -- # The Debian Security Audit Project. http://www.debian.org/security/audit -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]