conf: use saner mode for console

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index f2a3b62af0e3e13e5d494f6df82e80d4f0ef1d18..8d63c516421d3f98645e29bdada99346fad1e9ed 100644 (file)
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -1713,7 +1713,7 @@ static int lxc_setup_dev_console(struct lxc_rootfs *rootfs,
        if (ret < 0 && errno != EEXIST)
                return log_error_errno(-errno, errno, "Failed to create console");
 
-       ret = fchmod(console->pty, S_IXUSR | S_IXGRP);
+       ret = fchmod(console->pty, 0620);
        if (ret < 0)
                return log_error_errno(-errno, errno, "Failed to set mode \"0%o\" to \"%s\"", S_IXUSR | S_IXGRP, console->name);
 
@@ -1775,7 +1775,7 @@ static int lxc_setup_ttydir_console(struct lxc_rootfs *rootfs,
        if (ret < 0 && errno != EEXIST)
                return log_error_errno(-errno, errno, "Failed to create console");
 
-       ret = fchmod(console->pty, S_IXUSR | S_IXGRP);
+       ret = fchmod(console->pty, 0620);
        if (ret < 0)
                return log_error_errno(-errno, errno, "Failed to set mode \"0%o\" to \"%s\"", S_IXUSR | S_IXGRP, console->name);