enclave-builder: normalize app file modes in initramfs #351
No reviewers
Labels
No labels
Compat/Breaking
Component/Enclave-Builder
Component/Infrastructure
Deploy/BYOC
Deploy/Full-managed
Deploy/Self-hosted
Interface/API
Interface/CLI
Interface/Git
Interface/Web
Kind/Bug
Kind/Documentation
Kind/Enhancement
Kind/Feature
Kind/Security
Kind/Testing
Priority/Critical
Priority/High
Priority/Low
Priority/Medium
Reviewed/Confirmed
Reviewed/Duplicate
Reviewed/Invalid
Reviewed/Won't Fix
Status/Abandoned
Status/Blocked
Status/Need More Info
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
public/platform!351
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "refs/pull/351/head"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Commit
0667439replaced the in-container 'cp -r' app copy with a direct COPY app/ /build/initramfs/, dropping the umask normalization it gave for free.App file modes then leaked the build host's umask into PCR0/PCR1, so caution verify mismatched deploys across hosts. Force canonical modes.