Merge pull request #47513 from vvoland/v25.0-47498

[25.0 backport] daemon: overlay2: remove world writable permission from the lower file
This commit is contained in:
Paweł Gronowski 2024-03-06 14:58:50 +01:00 committed by GitHub
commit 061aa95809
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -406,7 +406,7 @@ func (d *Driver) create(id, parent string, opts *graphdriver.CreateOpts) (retErr
return err
}
if lower != "" {
if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o666); err != nil {
if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o644); err != nil {
return err
}
}