fix security vulnerability in lxc module

octal/decimal confusion makes file world-writable before executing it
reviewable/pr18780/r1
Chris Porter 9 years ago
parent 8afaa69e21
commit da84e2e9b8

@ -571,7 +571,7 @@ def create_script(command):
f.close() f.close()
# Ensure the script is executable. # Ensure the script is executable.
os.chmod(script_file, 1755) os.chmod(script_file, 0700)
# Get temporary directory. # Get temporary directory.
tempdir = tempfile.gettempdir() tempdir = tempfile.gettempdir()

Loading…
Cancel
Save