should use private tmp - Githubissues

clearlinux / micro-config-drive

An alternative and small cloud-init implementation in C

Other

46 stars 17 forks source link

should use private tmp #10

Closed sofar closed 8 years ago

sofar commented 8 years ago

clr-cloud-init should use a mount namespace to shield mounting the config-drive in a world-readable fashion. We can use PrivateTmp=yes in the systemd unit file to do this, trivially, which will make it inaccessible elsewhere.

devimc commented 8 years ago

Fixed f666061e94d2c8055aa90eb220d57957dbf6f0ee