Influxdata
/
influxdb
mirror of https://github.com/influxdata/influxdb.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

fix: prevent world-writable MANIFEST files (#24235) (#24236) 

When a new MANIFEST file is created, set
its permissions to 644, not 666

closes https://github.com/influxdata/influxdb/issues/24233

(cherry picked from commit aad79e471f)

closes https://github.com/influxdata/influxdb/issues/24234
pull/24253/head v1.11.2rc1
davidby-influx 2023-05-18 12:20:57 -07:00 committed by GitHub
parent e05cc9667e
commit eaa4c95de2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
tsdb/index/tsi1/partition.go
View File

@ -1469,7 +1469,7 @@ func (m *Manifest) Write() (int64, error) {
tmp = f.Name()
if err = f.Chmod(0666); err != nil {
if err = f.Chmod(0644); err != nil {
return fmt.Errorf("failed setting permissions on manifest file %q: %w", tmp, err)
}
if _, err = f.Write(buf); err != nil {