github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-14 06:15:45 +00:00
Code Issues Projects Releases Wiki Activity

Change default filestore permissions to 0700

Browse Source
This commit is contained in:
Tim Allclair 2024-12-13 13:11:52 -08:00
parent ce31c0f7cb
commit b2c84061c9
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/kubelet/util/store/filestore.go
View File

@ -28,6 +28,9 @@ import (
const ( const (
// Name prefix for the temporary files. // Name prefix for the temporary files.
tmpPrefix = "." tmpPrefix = "."
// The default permission bits to set on the filestore directory.
directoryPerm = 0700
) )
// FileStore is an implementation of the Store interface which stores data in files. // FileStore is an implementation of the Store interface which stores data in files.
@ -41,7 +44,7 @@ type FileStore struct {
// NewFileStore returns an instance of FileStore. // NewFileStore returns an instance of FileStore.
func NewFileStore(path string, fs utilfs.Filesystem) (Store, error) { func NewFileStore(path string, fs utilfs.Filesystem) (Store, error) {
if err := fs.MkdirAll(path, 0755); err != nil { if err := fs.MkdirAll(path, directoryPerm); err != nil {
return nil, err return nil, err
} }
return &FileStore{directoryPath: path, filesystem: fs}, nil return &FileStore{directoryPath: path, filesystem: fs}, nil
@ -52,7 +55,7 @@ func (f *FileStore) Write(key string, data []byte) error {
if err := ValidateKey(key); err != nil { if err := ValidateKey(key); err != nil {
return err return err
} }
if err := f.filesystem.MkdirAll(f.directoryPath, 0755); err != nil { if err := f.filesystem.MkdirAll(f.directoryPath, directoryPerm); err != nil {
return err return err
} }