Seth Hoenig 4148ca1769 client: mount shared alloc dir as nobody (#20589) ...

In the Unveil filesystem isolation mode we were mounting the shared
alloc dir with the UID/GID of the user of the task dir being mounted
and 0710 filesystem permissions. This was causing the actual task dir
to become inaccessible to other tasks in the allocation (a race where
the last mounter wins). Instead mount the shared alloc dir as nobody
with 0777 filesystem permissions.

2024-05-15 10:43:30 -05:00

..

input

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

alloc_dir_test.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00

alloc_dir.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_darwin.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_default.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00

fs_freebsd.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_linux_test.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

fs_linux.go

client: fixup how alloc mounts directory are setup (#20463)

2024-04-26 07:29:52 -05:00

fs_netbsd.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_solaris.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_unix.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

fs_windows.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

task_dir_linux.go

[refactor] Move task directory destroy logic from alloc_dir.go to task_dir.go (#20006)

2024-03-19 13:49:09 -04:00

task_dir_nonlinux.go

Update copyright file headers to BUSL-1.1

2023-08-10 17:27:15 -05:00

task_dir_test.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00

task_dir.go

client: mount shared alloc dir as nobody (#20589)

2024-05-15 10:43:30 -05:00

testing.go

exec2: add client support for unveil filesystem isolation mode (#20115)

2024-03-13 08:24:17 -05:00