Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KubernetesV1: changed chmod from 777 to 755 #18816

Merged
merged 4 commits into from
Aug 21, 2023

Conversation

v-mohithgc
Copy link
Contributor

@v-mohithgc v-mohithgc commented Aug 14, 2023

Task name: KubernetesV1

Description: found an elevation of privilege vulnerability in the KubernetesV1 Azure DevOps task. Permissions are being set too high using chmod 777. Which is considered a bad practice.

Documentation changes required: (Y/N)

Added unit tests: (Y/N)

Attached related issue: (Y/N)

Checklist:

  • Task version was bumped - please check instruction how to do it
  • Checked that applied changes work as expected

@v-mohithgc
Copy link
Contributor Author

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 4 pipeline(s).

@v-mohithgc
Copy link
Contributor Author

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 4 pipeline(s).

@v-mohithgc v-mohithgc requested a review from tkasparek August 16, 2023 11:18
@v-mohithgc
Copy link
Contributor Author

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 4 pipeline(s).

@v-mohithgc v-mohithgc merged commit 7b12c79 into microsoft:master Aug 21, 2023
@v-mohithgc v-mohithgc deleted the v-user/mgc/kubv1/chmod755 branch August 21, 2023 05:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants