Merge pull request #47514 from vvoland/v24.0-47498

[24.0 backport] daemon: overlay2: remove world writable permission from the lower file
This commit is contained in:
Sebastiaan van Stijn 2024-03-06 21:38:45 +01:00 committed by GitHub
commit 69b5ded97b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -409,7 +409,7 @@ func (d *Driver) create(id, parent string, opts *graphdriver.CreateOpts) (retErr
return err
}
if lower != "" {
if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o666); err != nil {
if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o644); err != nil {
return err
}
}