chiark / gitweb /
buildserver: /vagrant/cache writeable only by root
authorHans-Christoph Steiner <hans@eds.org>
Wed, 15 Jun 2016 10:47:16 +0000 (12:47 +0200)
committerHans-Christoph Steiner <hans@eds.org>
Wed, 15 Jun 2016 14:35:00 +0000 (16:35 +0200)
commitd0bb6f73bfeaf5b74b4146a86e1470976b9a4d80
tree2188c71e8ac10d665b0b84d120064d0d8b33bb3f
parent6ea2508127519e33a44fc32500d0dee5aaf96a94
buildserver: /vagrant/cache writeable only by root

Prevent build processes from modifying the cache, it is only needed
during provisioning anyway. A malicious build could still use sudo to
change the cache, but this is more to prevent mistaken modifications.
makebuildserver