Skip to content

Commit 71e837a

Browse files
fedonmanfedonman
authored
docs(cuda.core): correct the 1.1.1 program cache permissions note (#2718)
The note described the first draft of #2399. Review narrowed the change to the tmp/ staging directory, so only tmp/ is created 0o700 and the post-mkdir chmod was dropped. The cache root and entries/ inherit the umask and a pre-existing directory is left as-is, so nothing is re-asserted on each use. Entry files are 0o600 via mkstemp and an atomic replace, so the note's read-protection claim is kept. Closes #2717
1 parent c75eeda commit 71e837a

1 file changed

Lines changed: 6 additions & 4 deletions

File tree

‎cuda_core/docs/source/release/1.1.1-notes.rst‎

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,10 +41,12 @@ Fixes and enhancements
4141
internal driver thread.
4242
(`#2371 <https://github.com/NVIDIA/cuda-python/pull/2371>`__)
4343

44-
- The on-disk program cache directory is now created with owner-only
45-
permissions (``0o700``) on POSIX systems, and those permissions are
46-
re-asserted on each use. This prevents other local users from reading or
47-
injecting cached device code regardless of the process ``umask``.
44+
- Program cache entry files are now written with owner-only permissions
45+
(``0o600``) on POSIX systems, and the ``tmp/`` staging directory is created
46+
``0o700``, so other local users cannot read cached device code regardless of
47+
the process ``umask``. The cache root and ``entries/`` inherit the umask and
48+
a pre-existing cache directory is used as-is, so a deliberately shared cache
49+
keeps working.
4850
(`#2399 <https://github.com/NVIDIA/cuda-python/pull/2399>`__)
4951

5052
- DLPack: a ``NULL`` deleter in a ``DLManagedTensorVersioned`` capsule is now

0 commit comments

Comments
 (0)