github/client-go
1
0
Fork 0
mirror of https://github.com/kubernetes/client-go.git synced 2025-09-24 20:47:56 +00:00
Code Issues Projects Releases Wiki Activity

fix CVE-2019-11244: kubectl --http-cache=<world-accessible dir> creates world-writeable cached schema files

Browse Source 
Kubernetes-commit: f228ae3364729caed59087e23c42868454bc3ff4
This commit is contained in:
Yucheng Wu
2019-05-14 14:49:38 +08:00
committed by Kubernetes Publisher
parent e10a9b6eaa
commit 790a4f6363
4 changed files with 84 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
discovery/cached/disk/cached_discovery.go
View File

@@ -172,7 +172,7 @@ func (d *CachedDiscoveryClient) getCachedFile(filename string) ([]byte, error) {
}
func (d *CachedDiscoveryClient) writeCachedFile(filename string, obj runtime.Object) error {
if err := os.MkdirAll(filepath.Dir(filename), 0755); err != nil {
if err := os.MkdirAll(filepath.Dir(filename), 0750); err != nil {
return err
}
@@ -191,7 +191,7 @@ func (d *CachedDiscoveryClient) writeCachedFile(filename string, obj runtime.Obj
return err
}
err = os.Chmod(f.Name(), 0755)
err = os.Chmod(f.Name(), 0660)
if err != nil {
return err
}