Index: univention-dvs-node/debian/changelog
===================================================================
--- univention-dvs-node/debian/changelog	(Revision 20475)
+++ univention-dvs-node/debian/changelog	(Arbeitskopie)
@@ -1,3 +1,9 @@
+univention-dvs-node (1.0.30-10) unstable; urgency=low
+
+  * Make templates read-only (Bug #20454)
+
+ -- Philipp Hahn <hahn@univention.de>  Wed, 20 Oct 2010 14:53:38 +0200
+
 univention-dvs-node (1.0.30-9) unstable; urgency=low
 
   * u-d-d-t: Import missing univention.debug (Bug #18192)
Index: univention-dvs-node/univention-dvs-template-create
===================================================================
--- univention-dvs-node/univention-dvs-template-create	(Revision 20475)
+++ univention-dvs-node/univention-dvs-template-create	(Arbeitskopie)
@@ -78,9 +78,11 @@
 
 	def save( self ):
 		"""Dump description of VM to directory."""
-		fd = open( os.path.join( self.object[ 'path' ], 'description.pickle' ), 'wb' )
+		path = os.path.join(self.object['path'], 'description.pickle')
+		fd = open(path, 'wb')
 		pickle.dump( self.domain, fd )
 		fd.close()
+		os.chmod(path, 0440) # Bug 20454
 		self.object[ 'available' ] = 'TRUE'
 		self.object.modify()
 
@@ -125,6 +127,7 @@
 				ud.debug( ud.ADMIN, ud.INFO, 'move: %s -> %s' % ( disk.source, dest ) )
 				if restore:
 					restore_disks.append( ( dest, disk.source ) )
+				os.chmod(dest, 0440) # Bug 20454
 				disk.source = dest
 
 		self.object[ 'path' ] = path