apisix-python-plugin-runner icon indicating copy to clipboard operation
apisix-python-plugin-runner copied to clipboard

Published 20 hours ago • verified publisher icon apache

fix:chown socket file to belong to nobody

Open zar3bski opened this issue 2 years ago • 2 comments

In order to solve this bug, the socket created by apisix/runner/server/server.py now belongs to nobody so apisix runners could write on it.

I choose not to follow go plugin's chmod approach here, for it is to permissive / dangerous and could lead to privilege escalation

zar3bski avatar Sep 15 '22 10:09 zar3bski

@spacewander , @shuaijinchao , could you review this MR please?

zar3bski avatar Nov 02 '22 09:11 zar3bski

@spacewander @shuaijinchao Plz give me a approval :)

zar3bski avatar May 23 '23 06:05 zar3bski