Ensure the instance_identity directory is only accessible to vcap and root
[finishes
@@ -49,6 +49,7 @@ case $1 in
mkdir -p "$INSTANCE_IDENTITY_DIR"
mount -t tmpfs -o size=$instance_tmpfs_size tmpfs $INSTANCE_IDENTITY_DIR
chown -R vcap:vcap "$INSTANCE_IDENTITY_DIR"
+ chmod 0700 "$INSTANCE_IDENTITY_DIR"
TRUSTED_CERTS_DIR=${DATA_DIR}/trusted_certs
rm -rf "$TRUSTED_CERTS_DIR"
