]> git.ipfire.org Git - thirdparty/lxc.git/commit
lxc-start-ephemeral: Set tmpfs mode to 0755
authorStéphane Graber <stgraber@ubuntu.com>
Sun, 23 Feb 2014 00:34:27 +0000 (19:34 -0500)
committerStéphane Graber <stgraber@ubuntu.com>
Tue, 25 Feb 2014 21:18:09 +0000 (16:18 -0500)
commit4460deff35bc588e21bf81e2ddc37a66fa840e3c
tree88e051f64feb47805561b913c2f800d125c50a53
parent99bfcb4d778a580ef6fb178192abe3560c18ae65
lxc-start-ephemeral: Set tmpfs mode to 0755

The tmpfs was mounted with its default mode (1777) which was then picked
up by overlayfs/aufs as the target's mode.

This led to a world writable / in ephemeral containers.

I have confirmed that this issue doesn't impact lxc-clone.

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>
src/lxc/lxc-start-ephemeral.in