From fd0e0a2cbd3ae4693fce75152c67e0fe40520925 Mon Sep 17 00:00:00 2001 From: Shan Desai Date: Fri, 7 Jul 2023 18:58:21 +0200 Subject: [PATCH] fix(secrets): file permission value does not comply with spec closes #10783 Compose Spec mentions that default values for secrets is `0444` aka. world-readable permissions. However, the value was previously set to `0400`. Signed-off-by: Shan Desai --- pkg/compose/secrets.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/compose/secrets.go b/pkg/compose/secrets.go index 581c9c07a..4d96f5c9c 100644 --- a/pkg/compose/secrets.go +++ b/pkg/compose/secrets.go @@ -58,7 +58,7 @@ func createTar(env string, config types.ServiceSecretConfig) (bytes.Buffer, erro value := []byte(env) b := bytes.Buffer{} tarWriter := tar.NewWriter(&b) - mode := uint32(0o400) + mode := uint32(0o444) if config.Mode != nil { mode = *config.Mode }