github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

Merge pull request from GHSA-c2h3-6mxw-7mvq

Browse Source 
v1 & v2 runtimes: reduce permissions for bundle dir
This commit is contained in:
Derek McGowan
2021-10-04 08:24:47 -07:00
committed by GitHub
parent 64291df71b 7c621e1fcc
commit 3f00006f72
8 changed files with 476 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
snapshots/btrfs/btrfs.go
View File

@@ -51,11 +51,15 @@ type snapshotter struct {
// root needs to be a mount point of btrfs.
func NewSnapshotter(root string) (snapshots.Snapshotter, error) {
// If directory does not exist, create it
if _, err := os.Stat(root); err != nil {
if st, err := os.Stat(root); err != nil {
if !os.IsNotExist(err) {
return nil, err
}
if err := os.Mkdir(root, 0755); err != nil {
if err := os.Mkdir(root, 0700); err != nil {
return nil, err
}
} else if st.Mode()&os.ModePerm != 0700 {
if err := os.Chmod(root, 0700); err != nil {
return nil, err
}
}