You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To reproduce run umask 077 in your shell and then attach to any container running non-root user inside. After that try to run cntr exec. It fails, because /.cntr/pid file was created with permissions 600 and is not readable.
I've tested with zsh and bash.
Also with umask set to 000 the pid file is created with permissions 666 which means it's writable by anyone, which could potentially be a security issue?
To fix this the correct permissions should be set when this file is created:
To reproduce run
umask 077
in your shell and then attach to any container running non-root user inside. After that try to runcntr exec
. It fails, because/.cntr/pid
file was created with permissions 600 and is not readable.I've tested with zsh and bash.
Also with umask set to 000 the pid file is created with permissions 666 which means it's writable by anyone, which could potentially be a security issue?
To fix this the correct permissions should be set when this file is created:
cntr/src/dotcntr.rs
Lines 26 to 37 in 43f88bf
The text was updated successfully, but these errors were encountered: