From 187e9c1e4ea1ebb6864c5bf61558c42f2fc6c005 Mon Sep 17 00:00:00 2001
From: shaohuzhang1 <80892890+shaohuzhang1@users.noreply.github.com>
Date: Wed, 21 May 2025 17:39:09 +0800
Subject: [PATCH] build: Sensitive directory permissions (#3127)

---
 installer/Dockerfile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/installer/Dockerfile b/installer/Dockerfile
index c3e76fbe4..31c254bf1 100644
--- a/installer/Dockerfile
+++ b/installer/Dockerfile
@@ -71,7 +71,7 @@ RUN chmod 755 /opt/maxkb/app/installer/run-maxkb.sh && \
     chown -R sandbox:root /opt/maxkb/app/sandbox && \
     chmod g-x /usr/local/bin/* /usr/bin/* /bin/* /usr/sbin/* /sbin/* /usr/lib/postgresql/15/bin/* && \
     chmod g+x /usr/local/bin/python* && \
-    chmod g-r /etc
+    chmod g-rx /etc
 
 EXPOSE 8080