vbatts/containerd
1
0
Fork 0
Code Pull requests Releases Activity

set +x on overlay fs dirs

Browse source 
We need to set +x on the overlay dirs or after dropping from root to a
non-root user an eperm will happen on exec or other file access

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
This commit is contained in:
Michael Crosby 2017-03-24 12:47:52 -07:00
parent 597815af7e
commit 71e8d765df
3 changed files with 10 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
linux/runtime.go
View file

@ -41,7 +41,7 @@ type Config struct {
}
func New(ic *plugin.InitContext) (interface{}, error) {
path := filepath.Join(ic.Root, runtimeName)
path := filepath.Join(ic.State, runtimeName)
if err := os.MkdirAll(path, 0700); err != nil {
return nil, err
}