From bc81f3fe4a042a15343d2eab44da32d818ac1ade Mon Sep 17 00:00:00 2001 From: Fabricio Voznika Date: Fri, 7 Sep 2018 12:27:44 -0700 Subject: Remove '--file-access=direct' option It was used before gofer was implemented and it's not supported anymore. BREAKING CHANGE: proxy-shared and proxy-exclusive options are now: shared and exclusive. PiperOrigin-RevId: 212017643 Change-Id: If029d4073fe60583e5ca25f98abb2953de0d78fd --- runsc/cmd/boot.go | 7 ------- 1 file changed, 7 deletions(-) (limited to 'runsc/cmd') diff --git a/runsc/cmd/boot.go b/runsc/cmd/boot.go index 784baf23b..d8c7b9cd3 100644 --- a/runsc/cmd/boot.go +++ b/runsc/cmd/boot.go @@ -102,13 +102,6 @@ func (b *Boot) Execute(_ context.Context, f *flag.FlagSet, args ...interface{}) conf := args[0].(*boot.Config) waitStatus := args[1].(*syscall.WaitStatus) - // sentry should run with a umask of 0 when --file-access=direct, because we want - // to preserve file modes exactly as set by the sentry, which will have applied - // its own umask. - if conf.FileAccess == boot.FileAccessDirect { - syscall.Umask(0) - } - if b.applyCaps { caps := spec.Process.Capabilities if caps == nil { -- cgit v1.2.3