github/kata-containers
1
0
Fork 1
mirror of https://github.com/kata-containers/kata-containers.git synced 2025-08-12 13:22:28 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #10976 from zvonkok/fix-dev-permissions

Browse Source 
agent: Fix default linux device permissions
This commit is contained in:
Fabiano Fidêncio 2025-03-05 13:54:06 +01:00 committed by GitHub
commit 504d9e2b66
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/agent/rustjail/src/mount.rs
View File

@ -1016,10 +1016,17 @@ fn mknod_dev(dev: &LinuxDevice, relpath: &Path) -> Result<()> {
None => return Err(anyhow!("invalid spec".to_string())), None => return Err(anyhow!("invalid spec".to_string())),
}; };
let file_mode = dev
.file_mode()
// drop the mode if it is 0
.filter(|&m| m != 0)
// fall back to 0o666
.unwrap_or(0o666);
stat::mknod( stat::mknod(
relpath, relpath,
*f, *f,
Mode::from_bits_truncate(dev.file_mode().unwrap_or(0)), Mode::from_bits_truncate(file_mode),
nix::sys::stat::makedev(dev.major() as u64, dev.minor() as u64), nix::sys::stat::makedev(dev.major() as u64, dev.minor() as u64),
)?; )?;