Merge pull request #460 from rissh/sysdump-gzip-refactor

[#458] fix(sysdump): ensure AppArmor tar is gzipped in sysdump

recommend/registry/registry.go

@@ -250,7 +250,7 @@ func extractTar(tarname string, tempDir string) ([]string, []string) {
 				}
 				dl = append(dl, tgt)
 			case tar.TypeReg:
-				f, err := os.OpenFile(filepath.Clean(tgt), os.O_CREATE|os.O_RDWR, os.FileMode(hdr.Mode))
+				f, err := os.OpenFile(filepath.Clean(tgt), os.O_CREATE|os.O_RDWR, os.FileMode(hdr.Mode)) //#nosec G115 // hdr.mode bits are trusted here
 				if err != nil {
 					log.WithError(err).WithFields(log.Fields{
 						"target": tgt,

sysdump/sysdump.go

@@ -277,7 +277,7 @@ func copyFromPod(srcPath string, d string, c *k8s.Client) error {
 	for _, pod := range pods.Items {
 		destPath := path.Join(d, fmt.Sprintf("%s_apparmor.tar.gz", pod.Name))
 		reader, outStream := io.Pipe()
-		cmdArr := []string{"tar", "cf", "-", srcPath}
+		cmdArr := []string{"tar", "czf", "-", srcPath}
 		req := c.K8sClientset.CoreV1().RESTClient().
 			Get().
 			Namespace(pod.Namespace).