[launcher] Update cs host directory permission (#571)

Non root workload should be able to access the directory. 0744
doesn't include the execute permission for non root user.
Change it to 0755

Author: jkl73

launcher/container_runner.go

@@ -476,7 +476,7 @@ func (r *ContainerRunner) fetchAndWriteToken(ctx context.Context) error {
 // retry specifies the refresher goroutine's retry policy.
 func (r *ContainerRunner) fetchAndWriteTokenWithRetry(ctx context.Context,
 	retry func() *backoff.ExponentialBackOff) error {
-	if err := os.MkdirAll(launcherfile.HostTmpPath, 0744); err != nil {
+	if err := os.MkdirAll(launcherfile.HostTmpPath, 0755); err != nil {
 		return err
 	}
 	duration, err := r.refreshToken(ctx)

launcher/container_runner_test.go

@@ -160,7 +160,7 @@ func TestRefreshToken(t *testing.T) {
 		logger: logging.SimpleLogger(),
 	}
 
-	if err := os.MkdirAll(launcherfile.HostTmpPath, 0744); err != nil {
+	if err := os.MkdirAll(launcherfile.HostTmpPath, 0755); err != nil {
 		t.Fatalf("Error creating host token path directory: %v", err)
 	}
 
@@ -205,7 +205,7 @@ func TestRefreshTokenWithSignedContainerCacheEnabled(t *testing.T) {
 		logger:      logging.SimpleLogger(),
 	}
 
-	if err := os.MkdirAll(launcherfile.HostTmpPath, 0744); err != nil {
+	if err := os.MkdirAll(launcherfile.HostTmpPath, 0755); err != nil {
 		t.Fatalf("Error creating host token path directory: %v", err)
 	}
 
@@ -245,7 +245,7 @@ func TestRefreshTokenWithSignedContainerCacheEnabled(t *testing.T) {
 }
 
 func TestRefreshTokenError(t *testing.T) {
-	if err := os.MkdirAll(launcherfile.HostTmpPath, 0744); err != nil {
+	if err := os.MkdirAll(launcherfile.HostTmpPath, 0755); err != nil {
 		t.Fatalf("Error creating host token path directory: %v", err)
 	}
 

launcher/launcher/main.go

@@ -92,7 +92,7 @@ func main() {
 		return
 	}
 
-	if err := os.MkdirAll(launcherfile.HostTmpPath, 0744); err != nil {
+	if err := os.MkdirAll(launcherfile.HostTmpPath, 0755); err != nil {
 		logger.Error(fmt.Sprintf("failed to create %s: %v", launcherfile.HostTmpPath, err))
 	}