From fd797cfe1c2b38fdf6e4520df5522d79cc483a0f Mon Sep 17 00:00:00 2001 From: Dean Coakley Date: Mon, 20 Nov 2023 15:52:05 +0000 Subject: [PATCH] Restrict config apply directory permissions --- src/core/environment.go | 4 ++-- .../vendor/github.com/nginx/agent/v2/src/core/environment.go | 4 ++-- .../vendor/github.com/nginx/agent/v2/src/core/environment.go | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/src/core/environment.go b/src/core/environment.go index 528550b294..6c0f8bf893 100644 --- a/src/core/environment.go +++ b/src/core/environment.go @@ -286,8 +286,8 @@ func (env *EnvironmentType) WriteFile(backup ConfigApplyMarker, file *proto.File directory := filepath.Dir(fileFullPath) _, err := os.Stat(directory) if os.IsNotExist(err) { - log.Debugf("Creating directory %s with permissions 755", directory) - err = os.MkdirAll(directory, 0o755) + log.Debugf("Creating directory %s with permissions 750", directory) + err = os.MkdirAll(directory, 0o750) if err != nil { return err } diff --git a/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go b/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go index 528550b294..6c0f8bf893 100644 --- a/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go +++ b/test/integration/vendor/github.com/nginx/agent/v2/src/core/environment.go @@ -286,8 +286,8 @@ func (env *EnvironmentType) WriteFile(backup ConfigApplyMarker, file *proto.File directory := filepath.Dir(fileFullPath) _, err := os.Stat(directory) if os.IsNotExist(err) { - log.Debugf("Creating directory %s with permissions 755", directory) - err = os.MkdirAll(directory, 0o755) + log.Debugf("Creating directory %s with permissions 750", directory) + err = os.MkdirAll(directory, 0o750) if err != nil { return err } diff --git a/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go b/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go index 528550b294..6c0f8bf893 100644 --- a/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go +++ b/test/performance/vendor/github.com/nginx/agent/v2/src/core/environment.go @@ -286,8 +286,8 @@ func (env *EnvironmentType) WriteFile(backup ConfigApplyMarker, file *proto.File directory := filepath.Dir(fileFullPath) _, err := os.Stat(directory) if os.IsNotExist(err) { - log.Debugf("Creating directory %s with permissions 755", directory) - err = os.MkdirAll(directory, 0o755) + log.Debugf("Creating directory %s with permissions 750", directory) + err = os.MkdirAll(directory, 0o750) if err != nil { return err }