Commit 2ad5d217 authored by Vitaliy Filippov's avatar Vitaliy Filippov
Browse files

Drop geesefs root privileges

parent bfba0874

pkg/mounter/geesefs.go

+5 −0
Original line number Diff line number Diff line
@@ -93,6 +93,11 @@ func (geesefs *geesefsMounter) Mount(source, target, volumeID string) error { 
	if geesefs.region != "" {

		args = append(args, "--region", geesefs.region)

	}

	args = append(

		args,

		"--setuid", "65534", // nobody. drop root privileges

		"--setgid", "65534", // nogroup

	)

	useSystemd := true

	for i := 0; i < len(geesefs.meta.MountOptions); i++ {

		if geesefs.meta.MountOptions[i] == "--no-systemd" {