From 5cbafba457ad7628332ed63e9fd9d7b3a9d75697 Mon Sep 17 00:00:00 2001 From: yanghaichao12 Date: Thu, 11 Apr 2019 02:41:36 -0400 Subject: [PATCH] change directory permissions from 0755 to 0750 --- pkg/kubelet/cm/devicemanager/manager.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/kubelet/cm/devicemanager/manager.go b/pkg/kubelet/cm/devicemanager/manager.go index 2e3c7cf91d1..f3089042ece 100644 --- a/pkg/kubelet/cm/devicemanager/manager.go +++ b/pkg/kubelet/cm/devicemanager/manager.go @@ -231,7 +231,7 @@ func (m *ManagerImpl) Start(activePods ActivePodsFunc, sourcesReady config.Sourc } socketPath := filepath.Join(m.socketdir, m.socketname) - os.MkdirAll(m.socketdir, 0755) + os.MkdirAll(m.socketdir, 0750) if selinux.SELinuxEnabled() { if err := selinux.SetFileLabel(m.socketdir, config.KubeletPluginsDirSELinuxLabel); err != nil { klog.Warningf("Unprivileged containerized plugins might not work. Could not set selinux context on %s: %v", m.socketdir, err)