sbp commented on issue #1360: URL: https://github.com/apache/tooling-trusted-releases/issues/1360#issuecomment-4938688760
We originally tried to address this in one of our early PRs, #19. When we applied a fix, 42ddcc9bfb56a0d665d7b82b5fad28cbf5f691d9, some months later, we had a permissions problem and immediately had to revert it in 3ce2b65ce2061eac43e91953c3c4f98764f5fdcc. The problem was the permissions of the bind mount, which we fixed in Puppet. This means that the `medium` classification here is probably unwarranted; it's probably a `low`. We could still harden the container anyway so that we don't have to rely on the external environment, and I'm testing a potential approach. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
