a8b991f6be
When setting up a test volume, we use dd (usually as root) to create the file used for a loop mount. Permissions on that file will depend on the umask, but they should not grant read for all to prevent information leaks from Cinder volumes to any user. Change-Id: Ie84650ec13cf746a3bbc99c9f652832c655f182f
6 lines
168 B
YAML
6 lines
168 B
YAML
---
|
|
security:
|
|
- Set the permissions of the file used as backend
|
|
for the test volume to 0640, to avoid giving read
|
|
permissions to any user on created volumes.
|