diff options
| author | Frederick Muriuki Muriithi | 2025-08-21 15:01:06 -0500 |
|---|---|---|
| committer | Frederick Muriuki Muriithi | 2025-10-08 08:51:40 -0500 |
| commit | 566eb7a555cdf17c5904b50a1bdd9511831008f1 (patch) | |
| tree | c4058408105604302b2772e6197086f7e0800b1f | |
| parent | 55f1bb691a496cdc603e8f01f106be0cab803f28 (diff) | |
| download | gn-machines-566eb7a555cdf17c5904b50a1bdd9511831008f1.tar.gz | |
Map the auth db parent directory rather than just the file.
Mapping the file only leads to permission issues within the POLA wrapper since SQLite checks both the file, and the parent directory; because of this, we have to map the parent directory to the POLA wrapper too.
| -rw-r--r-- | genenetwork/services/genenetwork.scm | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/genenetwork/services/genenetwork.scm b/genenetwork/services/genenetwork.scm index 4aa35b9..8df566f 100644 --- a/genenetwork/services/genenetwork.scm +++ b/genenetwork/services/genenetwork.scm @@ -562,9 +562,9 @@ object." (source gn-auth-conf) (target source)) (file-system-mapping - (source auth-db) - (target source) - (writable? #t)) + (source (dirname auth-db)) + (target source) + (writable? #t)) (file-system-mapping (source gn-auth-secrets) (target source) |