Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

agent-registration.sock and udev.sock socket files world readable #683

Closed
huornlmj opened this issue Dec 7, 2023 · 2 comments
Closed

agent-registration.sock and udev.sock socket files world readable #683

huornlmj opened this issue Dec 7, 2023 · 2 comments
Labels
bug Something isn't working

Comments

@huornlmj
Copy link

huornlmj commented Dec 7, 2023

Describe the bug
Socket files are world readable on the host. This means that a limited user account on the host can read from the socket files that both containers use to converse with each other when they shouldn't have this permission. Is there a plan to make the world bit '0'?

ubuntu@localhost:~$ ls -la /var/lib/akri/agent-registration.sock
srwxr-xr-x 1 root root 0 Dec  7 10:40 /var/lib/akri/agent-registration.sock
@huornlmj huornlmj added the bug Something isn't working label Dec 7, 2023
@diconico07
Copy link
Contributor

You can't do anything with a RO unix stream socket, so I don't see the issue there

@huornlmj
Copy link
Author

huornlmj commented Dec 8, 2023

You can't do anything with a RO unix stream socket, so I don't see the issue there

Thanks for the confirmation @diconico07

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: Done
Development

No branches or pull requests

3 participants