opensource/podman
1
0
Fork 0
mirror of https://github.com/containers/podman.git synced 2025-08-06 11:32:07 +08:00
Code Issues Packages Projects Releases Wiki Activity

podman exec should set umask to match container

Browse Source 
Fixes: https://github.com/containers/podman/issues/19713

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
This commit is contained in:
Daniel J Walsh
2023-08-23 09:28:47 -04:00
parent 32f7bb131a
commit 6f284dbd46
3 changed files with 37 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
libpod/oci_conmon_exec_common.go
View File

@ -743,6 +743,14 @@ func (c *Container) prepareProcessExec(options *ExecOptions, env []string, sessi
pspec.User = processUser
}
if c.config.Umask != "" {
umask, err := c.umask()
if err != nil {
return nil, err
}
pspec.User.Umask = &umask
}
if err := c.setProcessCapabilitiesExec(options, user, execUser, pspec); err != nil {
return nil, err
}