ansible/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
Code Releases Activity

fix security vulnerability in lxc module

Browse source 
octal/decimal confusion makes file world-writable before executing it
This commit is contained in:
Chris Porter 2016-03-31 22:55:44 +01:00 committed by Matt Clay
parent e3d8facc7f
commit 2b8b04638d
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
lib/ansible/modules/extras/cloud/lxc/lxc_container.py
View file

@ -571,7 +571,7 @@ def create_script(command):
f.close() f.close()
# Ensure the script is executable. # Ensure the script is executable.
os.chmod(script_file, 1755) os.chmod(script_file, 0700)
# Get temporary directory. # Get temporary directory.
tempdir = tempfile.gettempdir() tempdir = tempfile.gettempdir()