15308555518/ MaxKB
1
0
Fork 0
mirror of https://github.com/1Panel-dev/MaxKB.git synced 2025-12-26 01:33:05 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

fix: fix incorrect permission may introduce security vulnerabilities.

This commit is contained in:
liqiang-fit2cloud 2025-11-17 11:16:31 +08:00
parent 91e8e833a9
commit 79988b170c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
apps/common/utils/tool_code.py
View File

@ -28,7 +28,7 @@ class ToolExecutor:
self.sandbox_so_path = f'{self.sandbox_path}/sandbox.so'
try:
if os.path.exists(self.sandbox_so_path):
os.chmod(self.sandbox_so_path, 0o644)
os.chmod(self.sandbox_so_path, 0o444)
# 初始化host黑名单
banned_hosts_file_path = f'{self.sandbox_path}/.SANDBOX_BANNED_HOSTS'
if os.path.exists(banned_hosts_file_path):
@ -40,7 +40,7 @@ class ToolExecutor:
banned_hosts = f"{banned_hosts},{hostname},{local_ip}"
with open(banned_hosts_file_path, "w") as f:
f.write(banned_hosts)
os.chmod(banned_hosts_file_path, 0o644)
os.chmod(banned_hosts_file_path, 0o444)
except Exception as e:
maxkb_logger.error(f'Failed to init SANDBOX_BANNED_HOSTS due to exception: {e}', exc_info=True)
pass