Github user shinrich commented on the issue:
https://github.com/apache/trafficserver/pull/1248
The logic looks reasonable. The invocation of the OWNER privilege looks
correct. I guess we could avoid that elevation if we did the chmod at the
point of the file was created, but I would assume that would be a pretty
significant code change.
The default permissions look odd, but that seems to be the pre-existing
default. As -1, I assume that chmod() interprets that as all bits set so in
addition to setting everything wide open (0x777), it would set the
setuid/setguid bits as well. But again, that is a separate issue.
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
