From ce9f8b440a58f1b63db88e9d46a5d8db24bfac7e Mon Sep 17 00:00:00 2001 From: lishengbao <563167901@qq.com> Date: Wed, 15 Mar 2023 06:38:55 +0000 Subject: [PATCH] =?UTF-8?q?=E8=A7=84=E8=8C=83=E5=92=8C=E4=BD=8E=E9=94=99?= =?UTF-8?q?=E7=B1=BB:=E9=94=99=E5=88=AB=E5=AD=97=E6=88=96=E6=8B=BC?= =?UTF-8?q?=E5=86=99=E9=94=99=E8=AF=AF=EF=BC=9B=E6=A0=87=E7=82=B9=E7=AC=A6?= =?UTF-8?q?=E5=8F=B7=E4=BD=BF=E7=94=A8=E9=94=99=E8=AF=AF=EF=BC=9B=E9=93=BE?= =?UTF-8?q?=E6=8E=A5=E9=94=99=E8=AF=AF=E3=80=81=E7=A9=BA=E5=8D=95=E5=85=83?= =?UTF-8?q?=E6=A0=BC=E3=80=81=E6=A0=BC=E5=BC=8F=E9=94=99=E8=AF=AF=EF=BC=9B?= =?UTF-8?q?=E8=8B=B1=E6=96=87=E4=B8=AD=E5=8C=85=E5=90=AB=E4=B8=AD=E6=96=87?= =?UTF-8?q?=E5=AD=97=E7=AC=A6=EF=BC=9B=E7=95=8C=E9=9D=A2=E5=92=8C=E6=8F=8F?= =?UTF-8?q?=E8=BF=B0=E4=B8=8D=E4=B8=80=E8=87=B4=EF=BC=8C=E4=BD=86=E4=B8=8D?= =?UTF-8?q?=E5=BD=B1=E5=93=8D=E6=93=8D=E4=BD=9C=EF=BC=9B=E8=A1=A8=E8=BF=B0?= =?UTF-8?q?=E4=B8=8D=E9=80=9A=E9=A1=BA=EF=BC=8C=E4=BD=86=E4=B8=8D=E5=BD=B1?= =?UTF-8?q?=E5=93=8D=E7=90=86=E8=A7=A3=EF=BC=9B=E7=89=88=E6=9C=AC=E5=8F=B7?= =?UTF-8?q?=E4=B8=8D=E5=8C=B9=E9=85=8D=EF=BC=9A=E5=A6=82=E8=BD=AF=E4=BB=B6?= =?UTF-8?q?=E5=8C=85=E5=90=8D=E7=A7=B0=E3=80=81=E7=95=8C=E9=9D=A2=E7=89=88?= =?UTF-8?q?=E6=9C=AC=E5=8F=B7=EF=BC=9B?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: lishengbao <563167901@qq.com> --- .../\345\256\211\350\243\205\351\205\215\347\275\256-3.md" | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git "a/docs/zh/docs/Container/\345\256\211\350\243\205\351\205\215\347\275\256-3.md" "b/docs/zh/docs/Container/\345\256\211\350\243\205\351\205\215\347\275\256-3.md" index f182c8a2f..3c315ad52 100644 --- "a/docs/zh/docs/Container/\345\256\211\350\243\205\351\205\215\347\275\256-3.md" +++ "b/docs/zh/docs/Container/\345\256\211\350\243\205\351\205\215\347\275\256-3.md" @@ -70,7 +70,7 @@ cat /etc/docker/daemon.json 容器主进程和exec进程的默认umask为0022,为了满足安全性需求,避免容器受到攻击,修改runc的实现,将默认umask修改为0027。修改后others群组将无法访问新建文件或目录。 -docker启动容器时的默认umask值为0027,可以在dockerd启动时,使用--exec-opt native.umask=normal参数将容器启动时的umask修改为0022。 +Docker启动容器时的默认umask值为0027,可以在dockerd启动时,使用--exec-opt native.umask=normal参数将容器启动时的umask修改为0022。 >![](./public_sys-resources/icon-notice.gif) **须知:** >如果docker create/run也配置了native.umask参数,则以docker create/run中的配置为准。 -- Gitee