]> git.ipfire.org Git - thirdparty/lxc.git/commit
do_lxcapi_create: set umask
authorKaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
Sun, 15 Apr 2018 11:50:28 +0000 (14:50 +0300)
committerChristian Brauner <christian.brauner@ubuntu.com>
Thu, 23 Aug 2018 20:55:34 +0000 (22:55 +0200)
commit1286c27129b1ca6f6c9195fe0c871817fe3cc7ab
tree8e9735acf7a24368731b0276d26239a8c71f5a1a
parent3d872a3fb21899a37b25f654c1fae8b439651d0e
do_lxcapi_create: set umask

Always use 022 as the umask when creating the rootfs directory and
executing the template. A too loose umask may cause security issues.
A too strict umask may cause programs to fail inside the container.

Signed-off-by: Kaarle Ritvanen <kaarle.ritvanen@datakunkku.fi>
src/lxc/lxccontainer.c