projects / arvados.git / commit
summary | shortlog | log | commit | commitdiff | tree
(parent: 5857ebe) | patch
12764: crunch-run temporary directories have common parent
authorPeter Amstutz <pamstutz@veritasgenetics.com>
Wed, 31 Jan 2018 21:22:31 +0000 (16:22 -0500)
committerPeter Amstutz <pamstutz@veritasgenetics.com>
Wed, 31 Jan 2018 21:22:31 +0000 (16:22 -0500)
commit2eb85f70168d331e49e9d38bfbd2292d586dfcc1
treec0e72518b2c60cfdef47f1f19edae0e249f70d21tree | snapshot
parent5857ebe3b0e512d76871020f1b08d49a9f4de70bcommit | diff
12764: crunch-run temporary directories have common parent

Some directories created by crunch-run need to be world
readable/writable.  Apply path-based security using parent directory
with mode 0700.  Enables crunch-run to bind into the container while
avoiding making the directory trivially accessible to anyone on the
host.

Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <pamstutz@veritasgenetics.com>
services/crunch-run/crunchrun.go diff | blob | history