fix security vulnerability in lxc module

octal/decimal confusion makes file world-writable before executing it
This commit is contained in:
Chris Porter 2016-03-31 22:55:44 +01:00
parent 8afaa69e21
commit da84e2e9b8

View file

@ -571,7 +571,7 @@ def create_script(command):
f.close()
# Ensure the script is executable.
os.chmod(script_file, 1755)
os.chmod(script_file, 0700)
# Get temporary directory.
tempdir = tempfile.gettempdir()