kemko/nomad
1
0
Fork 0
mirror of https://github.com/kemko/nomad.git synced 2026-01-01 16:05:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: added landlock access to /usr/libexec for getter (#16900)

Browse Source
This commit is contained in:
astudentofblake
2023-04-20 17:16:04 +01:00
committed by GitHub
parent e169847a64
commit 206236039c
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
.changelog/16900.txt Normal file
View File

@@ -0,0 +1,3 @@
```release-note:bug
fix: Added "/usr/libexec" to the landlocked directories the getter has access to
```

1
client/allocrunner/taskrunner/getter/util_linux.go
View File

@@ -63,6 +63,7 @@ func lockdown(allocDir, taskDir string) error {
landlock.Dir("/bin", "rx"),
landlock.Dir("/usr/bin", "rx"),
landlock.Dir("/usr/local/bin", "rx"),
landlock.Dir("/usr/libexec", "rx"),
landlock.Dir(allocDir, "rwc"),
landlock.Dir(taskDir, "rwc"),
}