diff options
| author | Paul Holzinger <pholzing@redhat.com> | 2022-07-22 14:16:25 +0200 |
|---|---|---|
| committer | Paul Holzinger <pholzing@redhat.com> | 2022-07-22 14:20:29 +0200 |
| commit | 5a80770e8e4e0150a57a9870dd9cbf2c85dafb6e (patch) | |
| tree | 887f4bb7b0efdaca587dfa34104ea92285a2102c | |
| parent | 99bf6f96cd93867813e72742c484ab0abf15cca4 (diff) | |
| download | podman-5a80770e8e4e0150a57a9870dd9cbf2c85dafb6e.tar.gz podman-5a80770e8e4e0150a57a9870dd9cbf2c85dafb6e.tar.bz2 podman-5a80770e8e4e0150a57a9870dd9cbf2c85dafb6e.zip | |
API: libpod/create use correct default umask
Make sure containers created via API have the correct umask from
containers.conf set.
Fixes #15036
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| -rw-r--r-- | pkg/api/handlers/libpod/containers_create.go | 3 | ||||
| -rw-r--r-- | test/apiv2/20-containers.at | 3 |
2 files changed, 5 insertions, 1 deletions
diff --git a/pkg/api/handlers/libpod/containers_create.go b/pkg/api/handlers/libpod/containers_create.go index e4964d602..1307c267a 100644 --- a/pkg/api/handlers/libpod/containers_create.go +++ b/pkg/api/handlers/libpod/containers_create.go @@ -31,6 +31,9 @@ func CreateContainer(w http.ResponseWriter, r *http.Request) { ContainerNetworkConfig: specgen.ContainerNetworkConfig{ UseImageHosts: conf.Containers.NoHosts, }, + ContainerSecurityConfig: specgen.ContainerSecurityConfig{ + Umask: conf.Containers.Umask, + }, } if err := json.NewDecoder(r.Body).Decode(&sg); err != nil { diff --git a/test/apiv2/20-containers.at b/test/apiv2/20-containers.at index 6ef4ef917..a8d9baef3 100644 --- a/test/apiv2/20-containers.at +++ b/test/apiv2/20-containers.at @@ -123,7 +123,8 @@ t GET libpod/containers/${cid}/json 200 \ .Id=$cid \ .State.Status~\\\(exited\\\|stopped\\\) \ .State.Running=false \ - .State.ExitCode=0 + .State.ExitCode=0 \ + .Config.Umask=0022 # regression check for #15036 t DELETE libpod/containers/$cid 200 .[0].Id=$cid CNAME=myfoo |