about summary refs log tree commit diff
diff options
context:
space:
mode:
authorFrederick Muriuki Muriithi2025-08-21 15:01:06 -0500
committerFrederick Muriuki Muriithi2025-10-01 09:30:11 -0500
commitc80c05d41c93322ae780d09509fc364b2f00bb5b (patch)
tree770e3ae3ce26b4bfb72468f3e18a3304e5a30620
parent3e93ae2b597b749135417210d12222cf26a08624 (diff)
downloadgn-machines-c80c05d41c93322ae780d09509fc364b2f00bb5b.tar.gz
Map the auth db parent directory rather than just the file.
Mapping the file only leads to permission issues within the POLA
wrapper since SQLite checks both the file, and the parent
directory; because of this, we have to map the parent directory to the
POLA wrapper too.
-rw-r--r--genenetwork/services/genenetwork.scm6
1 files changed, 3 insertions, 3 deletions
diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm
index 4aa35b9..8df566f 100644
--- a/genenetwork/services/genenetwork.scm
+++ b/genenetwork/services/genenetwork.scm
@@ -562,9 +562,9 @@ object."
                               (source gn-auth-conf)
                               (target source))
                              (file-system-mapping
-                              (source auth-db)
-                              (target source)
-                              (writable? #t))
+                               (source (dirname auth-db))
+                               (target source)
+                               (writable? #t))
                              (file-system-mapping
                               (source gn-auth-secrets)
                               (target source)