Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[GA / 7.0.1xx Internal -> External Port] Fix SDK Temp Paths #28477

Merged

Conversation

nagilson
Copy link
Member

Confirming file permissions are using 700:
The first image shows the temp path created by file utilities in the biggest exploit (Nuget Packages under sudo).
The second image shows the permissions on the file to be drwx-----

[Images redacted for internal only]

RC2 Port #28476

nagilson and others added 30 commits July 29, 2022 16:07
…re because we need someone to make a file with secure permissions and gettempfilename does that but getrandomfilename does not. Moving a file would override the permissions so we copy file contents over.
@nagilson nagilson requested review from dsplaisted and removed request for captainsafia and mkArtakMSFT October 11, 2022 20:58
@nagilson nagilson added the Priority:0 Work that we can't release without label Oct 11, 2022
@marcpopMSFT marcpopMSFT merged commit d639dd5 into dotnet:release/7.0.1xx Oct 12, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area-Infrastructure Priority:0 Work that we can't release without
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants