Skip to content

Commit

Permalink
kata-deploy: All binaries installed by kata should be writable by root
Browse files Browse the repository at this point in the history
Prior to this, some of the binaries installed by kata were not owned by
root. Any user can write/replace these binaries.
This was happening as tar perserves ownership while creating the
archive.
Change the ownership of all binaries to root.

Fixes kata-containers#489

Signed-off-by: Archana Shinde <archana.m.shinde@intel.com>
  • Loading branch information
amshinde committed May 8, 2019
1 parent 4bb97ef commit c3c8da0
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions kata-deploy/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,7 @@ yum install -y bzip2 jq && \
curl -sOL ${KATA_URL}/${KATA_FILE} && \
mkdir -p /opt/kata-artifacts && \
tar xvf ${KATA_FILE} -C /opt/kata-artifacts/ && \
chown -R root:root /opt/kata-artifacts/ && \
rm ${KATA_FILE}

RUN \
Expand Down

0 comments on commit c3c8da0

Please sign in to comment.