Change in vdsm[master]: mkimage: setup right permissions before mkisofs

nsoffer at redhat.com nsoffer at redhat.com
Fri Nov 13 13:44:40 UTC 2015


Nir Soffer has posted comments on this change.

Change subject: mkimage: setup right permissions before mkisofs
......................................................................


Patch Set 2:

(1 comment)

https://gerrit.ovirt.org/#/c/48538/2/vdsm/mkimage.py
File vdsm/mkimage.py:

Line 130: 
Line 131:         # pre-create the destination iso path with the right permissions;
Line 132:         # mkisofs/genisoimage will truncate the content and keep the
Line 133:         # permissions.
Line 134:         fd = os.open(isopath, os.O_CREAT | os.O_RDONLY | os.O_EXCL, 0o640)
One issue, if the file exists, the operation will fail. Is this possible with current code, or existing file means that somebody is trying to trick us to use a file with incorrect permissions?
Line 135:         os.close(fd)
Line 136: 
Line 137:         rc, out, err = execCmd(command, raw=True)
Line 138:         if rc:


-- 
To view, visit https://gerrit.ovirt.org/48538
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: comment
Gerrit-Change-Id: Ibc971a39ae2a8eaf7af934bb0922647e4676d03f
Gerrit-PatchSet: 2
Gerrit-Project: vdsm
Gerrit-Branch: master
Gerrit-Owner: Francesco Romani <fromani at redhat.com>
Gerrit-Reviewer: Dan Kenigsberg <danken at redhat.com>
Gerrit-Reviewer: Francesco Romani <fromani at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Nir Soffer <nsoffer at redhat.com>
Gerrit-Reviewer: Yaniv Bronhaim <ybronhei at redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>
Gerrit-HasComments: Yes


More information about the vdsm-patches mailing list