[PIPE2D-1011] Remove os.chmod() from RegistryContext initialization? Created: 25/Mar/22 Updated: 13/Jan/23 |
|
| Status: | Open |
| Project: | DRP 2-D Pipeline |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Normal |
| Reporter: | cloomis | Assignee: | Unassigned |
| Resolution: | Unresolved | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||
| Description |
|
https://github.com/Subaru-PFS/obs_pfs/commit/cdc82a032b98eca51253622ccc1c23adad7b5c56 added a context manager for registry access. That does an os.chmod() on the registry itself. But chmod(2) requires that the process and file users match, not just the groups. So only the sqlite file owner can ingest files. [or someone in the group can exploit fragile hacks inside the directory. ] |