diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-10-18 18:31:30 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-10-18 18:31:30 +0900 |
| commit | f92b4673a19272d8eda1302f3a36cb6073113f83 (patch) | |
| tree | 2dd8f154882736b557ff8c8cac0dabe03c79efe8 /internal/outcome/sptmpdir.go | |
| parent | bdca60d4959919a02f744457aaade3d9e2425f3a (diff) | |
internal/outcome: world-executable runtime/tmpdir
This does not reduce security, and saves the trouble of the additional
ACL setup/teardowns.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/outcome/sptmpdir.go')
| -rw-r--r-- | internal/outcome/sptmpdir.go | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/internal/outcome/sptmpdir.go b/internal/outcome/sptmpdir.go index 9a637f8b..c0c8db7b 100644 --- a/internal/outcome/sptmpdir.go +++ b/internal/outcome/sptmpdir.go @@ -19,8 +19,7 @@ type spTmpdirOp struct{} func (s spTmpdirOp) toSystem(state *outcomeStateSys) error { if state.Container.Flags&hst.FShareTmpdir != 0 { tmpdir, tmpdirInst := s.commonPaths(state.outcomeState) - state.sys.Ensure(tmpdir, 0700, true) - state.sys.UpdatePermType(system.User, tmpdir, acl.Execute) + state.sys.Ensure(tmpdir, 0711, false) state.sys.Ensure(tmpdirInst, 01700, true) state.sys.UpdatePermType(system.User, tmpdirInst, acl.Read|acl.Write|acl.Execute) } |