Commits on Mar 6, 2024

1. daemon: overlay2: remove world writable permission from the lower file …

   In de2447c, the creation of the 'lower' file was changed from using
   os.Create to using ioutils.AtomicWriteFile, which ignores the system's
   umask. This means that even though the requested permission in the
   source code was always 0666, it was 0644 on systems with default
   umask of 0022 prior to de2447c, so the move to AtomicFile potentially
   increased the file's permissions.
   
   This is not a security issue because the parent directory does not
   allow writes into the file, but it can confuse security scanners on
   Linux-based systems into giving false positives.
   
   Signed-off-by: Jaroslav Jindrak <dzejrou@gmail.com>
   (cherry picked from commit cadb124)
   Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>

   

   Dzejrou authored and vvoland committed Mar 6, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for d0d85f6
   • Browse repository at this point

   Copy the full SHA

   d0d85f6 View commit details

   Browse the repository at this point in the history