insecure tmp file usage (race on world readable ceph secrets)
Bug #1892235 reported by
James Troup
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Kubernetes Control Plane Charm |
Triaged
|
Medium
|
Unassigned | ||
Bug Description
charm-kubernete
Granted it's a race to read this file, but this still shouldn't be written out as world readable.
Revision history for this message
| George Kraft (cynerva) wrote | #1 |
| Changed in charm-kubernetes-master: | |
| importance: | Undecided → Medium |
| status: | New → Triaged |
To post a comment you must log in.
Thanks for pointing this out. The code is here: https:/
This is part of legacy code in the charm to support Kubernetes 1.11 and earlier. We can just remove that whole section, as Kubernetes 1.11 is well outside the range of versions supported by current charms.