gsadmin/rustfs
1
0
Fork 0
mirror of https://github.com/rustfs/rustfs.git synced 2026-08-29 08:27:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(tests): restrict Connect state tempdirs (#6642)

Browse Source
This commit is contained in:
Zhengchao An
2026-08-26 14:29:51 +08:00
committed by GitHub
parent a4377b6351
commit 4cd38feae7
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rustfs/tests/connect_registration.rs
+5 -2
View File
@@ -427,10 +427,13 @@ fn secure_tempdir() -> tempfile::TempDir {
.expect("test home directory must resolve without symlink components"); .expect("test home directory must resolve without symlink components");
fs::set_permissions(&home, fs::Permissions::from_mode(0o700)) fs::set_permissions(&home, fs::Permissions::from_mode(0o700))
.expect("test home directory permissions must be restricted to the process owner"); .expect("test home directory permissions must be restricted to the process owner");
tempfile::Builder::new() let temp = tempfile::Builder::new()
.prefix(".connect-registration-") .prefix(".connect-registration-")
.tempdir_in(home) .tempdir_in(home)
.expect("temporary directory inside the protected home directory") .expect("temporary directory inside the protected home directory");
fs::set_permissions(temp.path(), fs::Permissions::from_mode(0o700))
.expect("temporary state root permissions must be restricted to the process owner");
temp
} }
fn stage_next_identity(temp: &tempfile::TempDir) -> DeviceIdentity { fn stage_next_identity(temp: &tempfile::TempDir) -> DeviceIdentity {