From c3c8da0d000385bd6ff1e28c988754bf9296c52d Mon Sep 17 00:00:00 2001 From: Archana Shinde Date: Wed, 8 May 2019 10:56:19 -0700 Subject: [PATCH] kata-deploy: All binaries installed by kata should be writable by root Prior to this, some of the binaries installed by kata were not owned by root. Any user can write/replace these binaries. This was happening as tar perserves ownership while creating the archive. Change the ownership of all binaries to root. Fixes #489 Signed-off-by: Archana Shinde --- kata-deploy/Dockerfile | 1 + 1 file changed, 1 insertion(+) diff --git a/kata-deploy/Dockerfile b/kata-deploy/Dockerfile index 17951794..50092329 100644 --- a/kata-deploy/Dockerfile +++ b/kata-deploy/Dockerfile @@ -11,6 +11,7 @@ yum install -y bzip2 jq && \ curl -sOL ${KATA_URL}/${KATA_FILE} && \ mkdir -p /opt/kata-artifacts && \ tar xvf ${KATA_FILE} -C /opt/kata-artifacts/ && \ +chown -R root:root /opt/kata-artifacts/ && \ rm ${KATA_FILE} RUN \