Update console perms to 0600

Closes #4338

We should not give execute permissions to console output.

Signed-off-by: Serge Hallyn <serge@hallyn.com>

diff --git a/src/lxc/utils.c b/src/lxc/utils.c
index 2ccd6fb87898b3c17dd142140088c7a80ba6bf5a..f445debd6c9b145eb48f0f9620a8829b3e2654da 100644 (file)
--- a/src/lxc/utils.c
+++ b/src/lxc/utils.c
@@ -1856,7 +1856,7 @@ int fix_stdio_permissions(uid_t uid)
                        continue;
                }
 
-               ret = fchmod(std_fds[i], 0700);
+               ret = fchmod(std_fds[i], 0600);
                if (ret) {
                        SYSTRACE("Failed to chmod standard I/O file descriptor %d", std_fds[i]);
                        fret = -1;