epm: solve an issue about permission denied in container
If grpc address /var/run/epm is created with 0600 permission by epm service, the file epm can't be accessed
by epm client in container. So /var/run/epm's permission need be changed to 0755
@@ -67,7 +67,7 @@ func runServer(opts *options.Options, stopCh <-chan struct{}) error {
// registry and start the cache pool manager server
v1alpha1.RegisterEnclavePoolManagerServer(s, &server)
// listen and serve
- if err := os.MkdirAll(filepath.Dir(cfg.GRPC.Address), 0600); err != nil {
+ if err := os.MkdirAll(filepath.Dir(cfg.GRPC.Address), 0755); err != nil {
return err
}
if err := unix.Unlink(cfg.GRPC.Address); err != nil && !os.IsNotExist(err) {
