summaryrefslogtreecommitdiff
path: root/src/libostree/ostree-repo-refs.c
diff options
context:
space:
mode:
authorJonathan Lebon <jonathan@jlebon.com>2019-12-12 16:40:33 -0500
committerJonathan Lebon <jonathan@jlebon.com>2020-02-18 11:26:46 -0500
commit7085a50297955b037b6433821796f3f317c79126 (patch)
tree63d359b7bfaf33fb912fbbc591001b91297fce58 /src/libostree/ostree-repo-refs.c
parentb9a95afacc483606426e263032e2595e64705e94 (diff)
downloadostree-7085a50297955b037b6433821796f3f317c79126.tar.gz
lib/repo: Create repo directories as 0775
For repo structure directories like `objects`, `refs`, etc... we should be more permissive and let the system's `umask` narrow down the permission bits as wanted. This came up in a context where we want to be able to have read/write access on an OSTree repo on NFS from two separate OpenShift apps by using supplemental groups[1] so we don't require SCCs for running as the same UID (supplemental groups are part of the default restricted SCC). [1] https://docs.openshift.com/container-platform/3.11/install_config/persistent_storage/persistent_storage_nfs.html#nfs-supplemental-groups
Diffstat (limited to 'src/libostree/ostree-repo-refs.c')
-rw-r--r--src/libostree/ostree-repo-refs.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libostree/ostree-repo-refs.c b/src/libostree/ostree-repo-refs.c
index 536a763a..d1d679b2 100644
--- a/src/libostree/ostree-repo-refs.c
+++ b/src/libostree/ostree-repo-refs.c
@@ -1181,7 +1181,7 @@ _ostree_repo_write_ref (OstreeRepo *self,
char *parent = strdupa (ref->ref_name);
parent[lastslash - ref->ref_name] = '\0';
- if (!glnx_shutil_mkdir_p_at (dfd, parent, 0755, cancellable, error))
+ if (!glnx_shutil_mkdir_p_at (dfd, parent, DEFAULT_DIRECTORY_MODE, cancellable, error))
return FALSE;
}