moby/daemon/graphdriver
Jaroslav Jindrak cadb124ab6
daemon: overlay2: remove world writable permission from the lower file
In de2447c, the creation of the 'lower' file was changed from using
os.Create to using ioutils.AtomicWriteFile, which ignores the system's
umask. This means that even though the requested permission in the
source code was always 0666, it was 0644 on systems with default
umask of 0022 prior to de2447c, so the move to AtomicFile potentially
increased the file's permissions.

This is not a security issue because the parent directory does not
allow writes into the file, but it can confuse security scanners on
Linux-based systems into giving false positives.

Signed-off-by: Jaroslav Jindrak <dzejrou@gmail.com>
2024-03-05 14:25:50 +01:00
..
btrfs migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
copy graphdriver/copy: faster copy of hard links 2023-11-13 18:22:03 +00:00
fuse-overlayfs migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
graphtest daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
overlay2 daemon: overlay2: remove world writable permission from the lower file 2024-03-05 14:25:50 +01:00
overlayutils migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
register remove pre-go1.17 build-tags 2023-05-19 20:38:51 +02:00
vfs migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
windows migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
zfs migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
counter.go graphdriver: Fix RefCounter memory leak 2018-02-09 10:26:06 +08:00
driver.go migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
driver_freebsd.go daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
driver_linux.go daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
driver_test.go daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
driver_unsupported.go daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
driver_windows.go daemon/graphdriver: format code with gofumpt 2023-06-29 00:31:34 +02:00
errors.go Add canonical import comment 2018-02-05 16:51:57 -05:00
fsdiff.go migrate to github.com/containerd/log v0.1.0 2023-10-11 17:52:23 +02:00
plugin.go Finish refactor of UID/GID usage to a new struct 2022-03-14 16:28:57 -04:00
proxy.go pkg/containerfs: drop ContainerFS type alias 2022-09-23 16:56:53 -04:00
proxy_test.go Finish refactor of UID/GID usage to a new struct 2022-03-14 16:28:57 -04:00