verify: Simulate strict umask

envoyproxy · Aug 1, 2024 · 8e0fd0d · 8e0fd0d
1 parent f010aa3
commit 8e0fd0d
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/verify_example.sh b/verify_example.sh
@@ -23,7 +23,13 @@ complete () {
 }
 
 verify () {
-    tar xf $EXAMPLE_DIR -C $RUNDIR
+    tar xf "$EXAMPLE_DIR" -C "$RUNDIR"
+    export DOCKER_NO_PULL=1
+    export DOCKER_RMI_CLEANUP=1
+    # This is set to simulate an environment where users have shared home drives protected
+    # by a strong umask (ie only group readable by default).
+    umask 027
+    chmod -R o-rwx "$RUNDIR"
     cd "$RUNDIR"
     dirlist=$(ls .)
     if [[ "$dirlist" == "external" ]]; then