You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
MichaelThamm
changed the title
Cos-tool binary is world-writable, need to restrict permissions
Cos-tool binary is defined as 775 in charmcraft.yaml and 755 in charm
Jan 22, 2025
MichaelThamm
changed the title
Cos-tool binary is defined as 775 in charmcraft.yaml and 755 in charm
Cos-tool binary permissions 775 in charmcraft.yaml and 755 in charm
Jan 22, 2025
Instead of running chmod on the binary after installing it we should add a permissions key in the charmcraft.yaml similar to how we do it in our rocks:
Bug Description
In the charmcraft.yaml we:
Which should result in
775
permissions on the cos-tool binary, but when checking the permissions in the VM we get755
.To Reproduce
Note: This occurs when packing the charm locally from main and latest/edge from charmhub.
Relevant log output
juju ssh gagent/0 "ls -la1 /var/lib/juju/agents/unit-gagent-0/charm/cos-tool-amd64"
-rwxr-xr-x 1 root root 14864384 Jan 22 17:25 /var/lib/juju/agents/unit-gagent-0/charm/cos-tool-amd64
Which is
755
not775
!The text was updated successfully, but these errors were encountered: