Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix G301 gosec issues #10379

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from
Draft

Fix G301 gosec issues #10379

wants to merge 2 commits into from

Conversation

dimitarvdimitrov
Copy link
Contributor

@dimitarvdimitrov dimitarvdimitrov commented Jan 8, 2025

What this PR does

G301: Expect directory permissions to be 0750 or less

Which issue(s) this PR fixes or relates to

Fixes #

Checklist

  • Tests updated.
  • Documentation added.
  • CHANGELOG.md updated - the order of entries should be [CHANGE], [FEATURE], [ENHANCEMENT], [BUGFIX].
  • about-versioning.md updated with experimental features.

@dimitarvdimitrov dimitarvdimitrov requested review from a team as code owners January 8, 2025 15:00
Copy link
Contributor

@narqo narqo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't we mention these changes in the changelog?

Suppose someone runs mimir in a linux box under the nobody (65534:65534). After these changes, they won't be able to access the data on disk from another user, right? I don't say it's necessary a breaking change, but it feels worth being mentioned in the release.

Signed-off-by: Dimitar Dimitrov <[email protected]>
Signed-off-by: Dimitar Dimitrov <[email protected]>
@dimitarvdimitrov
Copy link
Contributor Author

Fair point, I added a changelog entry too

@dimitarvdimitrov dimitarvdimitrov requested a review from narqo January 9, 2025 08:41
Copy link
Contributor

@narqo narqo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔥 works for me

@dimitarvdimitrov dimitarvdimitrov marked this pull request as draft January 10, 2025 19:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants