Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configurable umask to all deamonized processes. #25664

Merged
merged 2 commits into from Aug 11, 2022

Conversation

ashb
Copy link
Member

@ashb ashb commented Aug 11, 2022

We previously had this for just the celery worker subcommand, this PR
extends it to anything that can run in daemon mode.

The old celery.worker_umask is still respected, but not shown in the config anymore.

We previously had this for just the `celery worker` subcommand, this PR
extends it to anything that can run in daemon mode
@ashb ashb requested a review from dstandish as a code owner August 11, 2022 10:26
@boring-cyborg boring-cyborg bot added area:CLI area:webserver Webserver related Issues labels Aug 11, 2022
@ashb ashb added this to the Airflow 2.3.4 milestone Aug 11, 2022
@@ -671,7 +671,6 @@ def string_lower_type(val):
ARG_UMASK = Arg(
("-u", "--umask"),
help="Set the umask of celery worker in daemon mode",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Help needs updating?

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not currently -- it's only used for the celery worker command -- the other commands don't have a --umask argument, they only use the config value.

airflow/config_templates/default_airflow.cfg Outdated Show resolved Hide resolved
airflow/config_templates/config.yml Outdated Show resolved Hide resolved
airflow/settings.py Show resolved Hide resolved
@ashb ashb merged commit bf14d14 into apache:main Aug 11, 2022
@ashb ashb deleted the umask-for-all-daemons branch August 11, 2022 16:03
@ephraimbuddy ephraimbuddy added the type:bug-fix Changelog: Bug Fixes label Aug 15, 2022
ephraimbuddy pushed a commit that referenced this pull request Aug 15, 2022
We previously had this for just the `celery worker` subcommand, this PR
extends it to anything that can run in daemon mode

(cherry picked from commit bf14d14)
@risicle
Copy link

risicle commented Sep 5, 2022

CVE-2022-38170 ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:CLI area:webserver Webserver related Issues type:bug-fix Changelog: Bug Fixes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

7 participants