quanweiZhou 7874ab33d4 agent: fix start container failed when dropping all capabilities ...

When starting a container and dropping all capabilities,
the init child process has no permission to read the exec.fifo
file because the parent set the file mode 0o622. So change the exec.fifo file mode to 0o644.

fixes #1913

Signed-off-by: quanweiZhou <quanweiZhou@linux.alibaba.com>
(cherry picked from commit 3e4ebe10ac)
Signed-off-by: Fabiano Fidêncio <fidencio@redhat.com>

2021-05-24 15:08:15 +02:00

..

agent

agent: fix start container failed when dropping all capabilities

2021-05-24 15:08:15 +02:00

runtime

sandbox-bindmount: persist mount information

2021-05-24 15:08:08 +02:00

trace-forwarder

logging: Use guard to make threaded logging safe

2021-03-29 14:32:11 +01:00