Merge pull request #76407 from yanghaichao12/dev0411

change directory permissions from 0755 to 0750
This commit is contained in:
Kubernetes Prow Robot 2019-11-05 19:30:59 -08:00 committed by GitHub
commit 0c0408c790
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -231,7 +231,7 @@ func (m *ManagerImpl) Start(activePods ActivePodsFunc, sourcesReady config.Sourc
}
socketPath := filepath.Join(m.socketdir, m.socketname)
os.MkdirAll(m.socketdir, 0755)
os.MkdirAll(m.socketdir, 0750)
if selinux.SELinuxEnabled() {
if err := selinux.SetFileLabel(m.socketdir, config.KubeletPluginsDirSELinuxLabel); err != nil {
klog.Warningf("Unprivileged containerized plugins might not work. Could not set selinux context on %s: %v", m.socketdir, err)