Merge pull request moby#47498 from Dzejrou/lower-perm-fix

thaJeztah · web-flow · commit cb8c8e96318e · 2024-03-06T13:09:30.000+01:00
daemon: overlay2: remove world writable permission from the lower file
diff --git a/daemon/graphdriver/overlay2/overlay.go b/daemon/graphdriver/overlay2/overlay.go
@@ -406,7 +406,7 @@ func (d *Driver) create(id, parent string, opts *graphdriver.CreateOpts) (retErr
 		return err
 	}
 	if lower != "" {
-		if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o666); err != nil {
+		if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o644); err != nil {
 			return err
 		}
 	}

Original file line number	Diff line number	Diff line change
`@@ -406,7 +406,7 @@ func (d Driver) create(id, parent string, opts graphdriver.CreateOpts) (retErr`
`406`	`406`	`return err`
`407`	`407`	`}`
`408`	`408`	`if lower != "" {`
`409`		`- if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o666); err != nil {`
	`409`	`+ if err := ioutils.AtomicWriteFile(path.Join(dir, lowerFile), []byte(lower), 0o644); err != nil {`
`410`	`410`	`return err`
`411`	`411`	`}`
`412`	`412`	`}`