Restrict config apply directory permissions

nginx · Nov 20, 2023 · fd797cf · fd797cf
1 parent 89fc334
commit fd797cf
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/src/core/environment.go b/src/core/environment.go
@@ -286,8 +286,8 @@ func (env *EnvironmentType) WriteFile(backup ConfigApplyMarker, file *proto.File
 	directory := filepath.Dir(fileFullPath)
 	_, err := os.Stat(directory)
 	if os.IsNotExist(err) {
-		log.Debugf("Creating directory %s with permissions 755", directory)
-		err = os.MkdirAll(directory, 0o755)
+		log.Debugf("Creating directory %s with permissions 750", directory)
+		err = os.MkdirAll(directory, 0o750)
 		if err != nil {
 			return err
 		}

diff --git a/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go b/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go
diff --git a/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go b/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go