containerd

github/containerd

Fork 0

Commit Graph

Author	SHA1	Message	Date
zounengren	1f1cad3912	io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions Signed-off-by: Zou Nengren <zouyee1989@gmail.com>	2021-10-13 09:18:31 +08:00
Samuel Karp	7d56b24f1a	v2 runtime: reduce permissions for bundle dir Bundle directory permissions should be 0700 by default. On Linux with user namespaces enabled, the remapped root also needs access to the bundle directory. In this case, the bundle directory is modified to 0710 and group ownership is changed to the remapped root group. Signed-off-by: Samuel Karp <skarp@amazon.com>	2021-09-22 16:13:09 -07:00

Author

SHA1

Message

Date

zounengren

1f1cad3912

io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions

Signed-off-by: Zou Nengren <zouyee1989@gmail.com>

2021-10-13 09:18:31 +08:00

Samuel Karp

7d56b24f1a

v2 runtime: reduce permissions for bundle dir

Bundle directory permissions should be 0700 by default.  On Linux with
user namespaces enabled, the remapped root also needs access to the
bundle directory.  In this case, the bundle directory is modified to
0710 and group ownership is changed to the remapped root group.

Signed-off-by: Samuel Karp <skarp@amazon.com>

2021-09-22 16:13:09 -07:00

2 Commits