From: Serge Hallyn <serge@hallyn.com>
Date: Tue, 29 Aug 2023 21:14:28 +0000 (-0500)
Subject: Update console perms to 0600
X-Git-Tag: v6.0.0~46^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F4339%2Fhead;p=thirdparty%2Flxc.git

Update console perms to 0600

Closes #4338

We should not give execute permissions to console output.

Signed-off-by: Serge Hallyn <serge@hallyn.com>
---

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 2ccd6fb87..f445debd6 100644
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -1856,7 +1856,7 @@ int fix_stdio_permissions(uid_t uid)
 			continue;
 		}
 
-		ret = fchmod(std_fds[i], 0700);
+		ret = fchmod(std_fds[i], 0600);
 		if (ret) {
 			SYSTRACE("Failed to chmod standard I/O file descriptor %d", std_fds[i]);
 			fret = -1;