- system and/or filesystems described by the [data] struct. The
- [name] parameter should be some host-side (verifiable) name;
- usually we pass the name of the guest from libvirt here. *)
+ system and/or filesystems described by the [data] struct.
+
+ The [name] parameter should be some host-side (verifiable) name,
+ not any untrusted string from the guest; usually we pass the
+ name of the guest from libvirt here. *)