[prev in list] [next in list] [prev in thread] [next in thread] 

List:       mesos-user
Subject:    narrowing task sandbox permissions
From:       James Peach <jorgar () gmail ! com>
Date:       2017-12-15 0:14:52
Message-ID: A85872C6-AB18-425A-8C5D-71F91D8C42BB () gmail ! com
[Download RAW message or body]

Hi all,

In https://issues.apache.org/jira/browse/MESOS-8332, I'm proposing a =
change to narrow the permissions used for the task sandbox directory =
from 0755 to 0750. Note that this change also makes failure to chown =
this directory into a hard failure.

I expect this is a safe change for well-behaved configurations, but =
please let me know if you have any compatibility concerns.

thanks,
James=
[prev in list] [next in list] [prev in thread] [next in thread]