mirror of
https://github.com/ansible-collections/community.general.git
synced 2026-05-06 13:22:48 +00:00
fix security vulnerability in lxc module
octal/decimal confusion makes file world-writable before executing it
This commit is contained in:
@@ -571,7 +571,7 @@ def create_script(command):
|
||||
f.close()
|
||||
|
||||
# Ensure the script is executable.
|
||||
os.chmod(script_file, 1755)
|
||||
os.chmod(script_file, 0700)
|
||||
|
||||
# Get temporary directory.
|
||||
tempdir = tempfile.gettempdir()
|
||||
|
||||
Reference in New Issue
Block a user